Collect AWS CloudTrail logs

Field mapping reference

Field mapping reference: Event Identifier to Event Type

The following table lists the AWS Cloudtrail log type eventName and their corresponding UDM event types.

Event Identifier	Event Type	Security Category
`GetApplication`	`RESOURCE_READ`
`GetConfigurationProfile`	`RESOURCE_READ`
`GetDeployment`	`RESOURCE_READ`
`GetDeploymentStrategy`	`RESOURCE_READ`
`GetEnvironment`	`RESOURCE_READ`
`ListConfigurationProfiles`	`RESOURCE_READ`
`ListExtensionAssociations`	`RESOURCE_READ`
`ListHostedConfigurationVersions`	`RESOURCE_READ`
`AttachInstances`	`RESOURCE_PERMISSIONS_CHANGE`
`AttachLoadBalancerTargetGroups`	`RESOURCE_PERMISSIONS_CHANGE`
`CompleteLifecycleAction`	`STATUS_UPDATE`
`CreateAutoScalingGroup`	`RESOURCE_CREATION`
`CreateLaunchConfiguration`	`RESOURCE_CREATION`
`CreateOrUpdateTags`	`RESOURCE_CREATION`
`DeleteAutoScalingGroup`	`RESOURCE_DELETION`
`DeleteLaunchConfiguration`	`RESOURCE_DELETION`
`DeletePolicy`	`RESOURCE_DELETION`
`DeleteScheduledAction`	`RESOURCE_DELETION`
`DeregisterScalableTarget`	`RESOURCE_DELETION`
`DescribeAutoScalingGroups`	`RESOURCE_READ`
`DescribeAutoScalingInstances`	`RESOURCE_READ`
`DescribeInstanceRefreshes`	`RESOURCE_READ`
`DescribeLaunchConfigurations`	`RESOURCE_READ`
`DescribeLifecycleHooks`	`RESOURCE_READ`
`DescribeLoadBalancerTargetGroups`	`RESOURCE_READ`
`DescribeNotificationConfigurations`	`RESOURCE_READ`
`DescribePolicies`	`RESOURCE_READ`
`DescribeScalableTargets`	`RESOURCE_READ`
`DescribeScalingActivities`	`RESOURCE_READ`
`DescribeScalingPlans`	`RESOURCE_READ`
`DescribeScalingPolicies`	`RESOURCE_READ`
`DescribeScheduledActions`	`RESOURCE_READ`
`DescribeWarmPool`	`RESOURCE_READ`
`DetachInstances`	`RESOURCE_PERMISSIONS_CHANGE`
`DetachLoadBalancerTargetGroups`	`RESOURCE_PERMISSIONS_CHANGE`
`PutNotificationConfiguration`	`RESOURCE_CREATION`
`PutScalingPolicy`	`RESOURCE_CREATION`
`PutScheduledUpdateGroupAction`	`RESOURCE_CREATION`
`ResumeProcesses`	`RESOURCE_PERMISSIONS_CHANGE`
`SetDesiredCapacity`	`RESOURCE_WRITTEN`
`SetInstanceProtection`	`RESOURCE_PERMISSIONS_CHANGE`
`StartInstanceRefresh`	`STATUS_STARTUP`
`SuspendProcesses`	`RESOURCE_PERMISSIONS_CHANGE`
`TerminateInstanceInAutoScalingGroup`	`RESOURCE_DELETION`
`UpdateAutoScalingGroup`	`RESOURCE_PERMISSIONS_CHANGE`
`ListEnvironments`	`RESOURCE_READ`
`DescribeDomains`	`RESOURCE_READ`
`createEnvironment`	`RESOURCE_CREATION`
`CreateSession`	`NETWORK_UNCATEGORIZED`
`DeleteSession`	`NETWORK_UNCATEGORIZED`
`GetEnvironmentStatus`	`RESOURCE_READ`
`GetFileUploadUrls`	`RESOURCE_READ`
`GetLayout`	`RESOURCE_READ`
`PutCredentials`	`RESOURCE_PERMISSIONS_CHANGE`
`RedeemCode`	`RESOURCE_READ`
`SendHeartBeat`	`STATUS_HEARTBEAT`
`StartEnvironment`	`STATUS_STARTUP`
`UpdateLayout`	`STATUS_UPDATE`
`CreateTrail`	`RESOURCE_CREATION`
`DescribeTrails`	`RESOURCE_READ`
`GetEventSelectors`	`RESOURCE_READ`
`GetInsightSelectors`	`RESOURCE_READ`
`GetServiceLinkedChannel`	`RESOURCE_READ`
`GetTrail`	`RESOURCE_READ`
`GetTrailStatus`	`RESOURCE_READ`
`ListEventDataStores`	`RESOURCE_READ`
`ListTags`	`RESOURCE_READ`
`ListTrails`	`RESOURCE_READ`
`LookupEvents`	`RESOURCE_READ`
`PutEventSelectors`	`RESOURCE_WRITTEN`
`StartLogging`	`RESOURCE_WRITTEN`
`UpdateTrail`	`USER_RESOURCE_UPDATE_CONTENT`
`BatchGetResourceConfig`	`RESOURCE_READ`
`DeleteConfigRule`	`RESOURCE_DELETION`
`DescribeAggregationAuthorizations`	`RESOURCE_READ`
`DescribeComplianceByConfigRule`	`RESOURCE_READ`
`DescribeComplianceByResource`	`RESOURCE_READ`
`DescribeConfigRuleEvaluationStatus`	`RESOURCE_READ`
`DescribeConfigRules`	`RESOURCE_READ`
`DescribeConfigurationAggregators`	`RESOURCE_READ`
`DescribeConfigurationRecorders`	`RESOURCE_READ`
`DescribeConfigurationRecorderStatus`	`RESOURCE_READ`
`DescribeConformancePacks`	`RESOURCE_READ`
`DescribeDeliveryChannels`	`RESOURCE_READ`
`DescribePendingAggregationRequests`	`RESOURCE_READ`
`DescribeRemediationConfigurations`	`RESOURCE_READ`
`GetComplianceDetailsByConfigRule`	`RESOURCE_READ`
`GetResourceConfigHistory`	`RESOURCE_READ`
`ListConformancePackComplianceScores`	`RESOURCE_READ`
`ListDiscoveredResources`	`RESOURCE_READ`
`PutConfigRule`	`RESOURCE_WRITTEN`
`PutEvaluations`	`RESOURCE_WRITTEN`
`SelectResourceConfig`	`RESOURCE_READ`
`ListTestGridProjects`	`RESOURCE_READ`
`CreateTable`	`RESOURCE_CREATION`
`DeleteItem`	`RESOURCE_WRITTEN`
`DescribeContinuousBackups`	`RESOURCE_READ`
`DescribeGlobalTable`	`RESOURCE_READ`
`DescribeTable`	`RESOURCE_READ`
`DescribeTimeToLive`	`RESOURCE_READ`
`GetItem`	`RESOURCE_READ`
`ListContributorInsights`	`RESOURCE_READ`
`ListTables`	`RESOURCE_READ`
`ListTagsOfResource`	`RESOURCE_READ`
`PutItem`	`RESOURCE_CREATION`
`Scan`	`RESOURCE_READ`
`SendSerialConsoleSSHPublicKey`	`RESOURCE_WRITTEN`
`SendSSHPublicKey`	`RESOURCE_WRITTEN`
`AcceptVpcPeeringConnection`	`STATUS_UPDATE`
`AllocateAddress`	`RESOURCE_CREATION`
`AssignPrivateIpAddresses`	`RESOURCE_WRITTEN`
`AssociateAddress`	`RESOURCE_WRITTEN`
`AssociateIamInstanceProfile`	`RESOURCE_WRITTEN`
`AssociateRouteTable`	`RESOURCE_WRITTEN`
`AttachInternetGateway`	`RESOURCE_WRITTEN`
`AttachNetworkInterface`	`RESOURCE_WRITTEN`
`AttachVolume`	`RESOURCE_WRITTEN`
`AttachVpnGateway`	`RESOURCE_WRITTEN`
`AuthorizeSecurityGroupEgress`	`RESOURCE_PERMISSIONS_CHANGE`
`AuthorizeSecurityGroupIngress`	`RESOURCE_PERMISSIONS_CHANGE`
`AutomatedDefaultVpcCreation`	`RESOURCE_CREATION`
`BidEvictedEvent`	`RESOURCE_WRITTEN`
`CopyImage`	`RESOURCE_WRITTEN`
`CopySnapshot`	`RESOURCE_WRITTEN`
`CreateCustomerGateway`	`RESOURCE_CREATION`
`CreateFleet`	`RESOURCE_CREATION`
`CreateFlowLogs`	`RESOURCE_CREATION`
`CreateImage`	`RESOURCE_CREATION`
`CreateInternetGateway`	`RESOURCE_CREATION`
`CreateKeyPair`	`RESOURCE_CREATION`
`CreateLaunchTemplate`	`RESOURCE_CREATION`
`CreateLaunchTemplateVersion`	`RESOURCE_CREATION`
`CreateNatGateway`	`RESOURCE_CREATION`
`CreateNetworkAcl`	`RESOURCE_CREATION`
`CreateNetworkAclEntry`	`RESOURCE_PERMISSIONS_CHANGE`
`CreateNetworkInsightsAccessScope`	`RESOURCE_CREATION`
`CreateNetworkInsightsPath`	`RESOURCE_CREATION`
`CreateNetworkInterface`	`RESOURCE_CREATION`
`CreateNetworkInterfacePermission`	`RESOURCE_PERMISSIONS_CHANGE`
`CreateRoute`	`RESOURCE_CREATION`
`CreateRouteTable`	`RESOURCE_CREATION`
`CreateSecurityGroup`	`RESOURCE_CREATION`
`CreateSnapshot`	`RESOURCE_CREATION`
`CreateSnapshots`	`RESOURCE_CREATION`
`CreateSubnet`	`RESOURCE_CREATION`
`CreateTags`	`RESOURCE_WRITTEN`
`CreateVolume`	`RESOURCE_CREATION`
`CreateVpc`	`RESOURCE_CREATION`
`CreateVpcEndpoint`	`RESOURCE_CREATION`
`CreateVpcEndpointServiceConfiguration`	`RESOURCE_CREATION`
`CreateVpnConnection`	`RESOURCE_CREATION`
`CreateVpnConnectionRoute`	`RESOURCE_CREATION`
`CreateVpnGateway`	`RESOURCE_CREATION`
`DeleteCustomerGateway`	`RESOURCE_DELETION`
`DeleteInternetGateway`	`RESOURCE_DELETION`
`DeleteLaunchTemplate`	`RESOURCE_DELETION`
`DeleteLaunchTemplateVersions`	`RESOURCE_DELETION`
`DeleteNatGateway`	`RESOURCE_DELETION`
`DeleteNetworkAclEntry`	`RESOURCE_DELETION`
`DeleteNetworkInsightsAccessScope`	`RESOURCE_DELETION`
`DeleteNetworkInsightsAccessScopeAnalysis`	`RESOURCE_DELETION`
`DeleteNetworkInterface`	`RESOURCE_DELETION`
`DeleteRoute`	`RESOURCE_DELETION`
`DeleteRouteTable`	`RESOURCE_DELETION`
`DeleteSecurityGroup`	`RESOURCE_DELETION`
`DeleteSnapshot`	`RESOURCE_DELETION`
`DeleteSubnet`	`RESOURCE_DELETION`
`DeleteTags`	`RESOURCE_DELETION`
`DeleteVolume`	`RESOURCE_DELETION`
`DeleteVpc`	`RESOURCE_DELETION`
`DeleteVpcEndpoints`	`RESOURCE_DELETION`
`DeleteVpcEndpointServiceConfigurations`	`RESOURCE_DELETION`
`DeleteVpnConnection`	`RESOURCE_DELETION`
`DeleteVpnConnectionRoute`	`RESOURCE_DELETION`
`DeleteVpnGateway`	`RESOURCE_DELETION`
`DeregisterImage`	`RESOURCE_DELETION`
`DescribeAccountAttributes`	`RESOURCE_READ`
`DescribeAddresses`	`RESOURCE_READ`
`DescribeAddressesAttribute`	`RESOURCE_READ`
`DescribeAddressTransfers`	`RESOURCE_READ`
`DescribeAvailabilityZones`	`RESOURCE_READ`
`DescribeByoipCidrs`	`RESOURCE_READ`
`DescribeCapacityReservationFleets`	`RESOURCE_READ`
`DescribeCapacityReservations`	`RESOURCE_READ`
`DescribeCarrierGateways`	`RESOURCE_READ`
`DescribeClientVpnEndpoints`	`RESOURCE_READ`
`DescribeCoipPools`	`RESOURCE_READ`
`DescribeCustomerGateways`	`RESOURCE_READ`
`DescribeDhcpOptions`	`RESOURCE_READ`
`DescribeEgressOnlyInternetGateways`	`RESOURCE_READ`
`DescribeElasticGpus`	`RESOURCE_READ`
`DescribeFastLaunchImages`	`RESOURCE_READ`
`DescribeFastSnapshotRestores`	`RESOURCE_READ`
`DescribeFleets`	`RESOURCE_READ`
`DescribeFlowLogs`	`RESOURCE_READ`
`DescribeFpgaImages`	`RESOURCE_READ`
`DescribeHostReservations`	`RESOURCE_READ`
`DescribeHosts`	`RESOURCE_READ`
`DescribeIamInstanceProfileAssociations`	`RESOURCE_READ`
`DescribeImageAttribute`	`RESOURCE_READ`
`DescribeImages`	`RESOURCE_READ`
`DescribeInstanceAttribute`	`RESOURCE_READ`
`DescribeInstanceConnectEndpoints`	`RESOURCE_READ`
`DescribeInstanceCreditSpecifications`	`RESOURCE_READ`
`DescribeInstanceEventWindows`	`RESOURCE_READ`
`DescribeInstances`	`RESOURCE_READ`
`DescribeInstanceStatus`	`RESOURCE_READ`
`DescribeInstanceTypeOfferings`	`RESOURCE_READ`
`DescribeInstanceTypes`	`RESOURCE_READ`
`DescribeInternetGateways`	`RESOURCE_READ`
`DescribeIpamPools`	`RESOURCE_READ`
`DescribeIpamResourceDiscoveries`	`RESOURCE_READ`
`DescribeIpamResourceDiscoveryAssociations`	`RESOURCE_READ`
`DescribeIpams`	`RESOURCE_READ`
`DescribeIpamScopes`	`RESOURCE_READ`
`DescribeKeyPairs`	`RESOURCE_READ`
`DescribeLaunchTemplates`	`RESOURCE_READ`
`DescribeLaunchTemplateVersions`	`RESOURCE_READ`
`DescribeLocalGatewayRouteTables`	`RESOURCE_READ`
`DescribeLockedSnapshots`	`RESOURCE_READ`
`DescribeManagedPrefixLists`	`RESOURCE_READ`
`DescribeNatGateways`	`RESOURCE_READ`
`DescribeNetworkAcls`	`RESOURCE_READ`
`DescribeNetworkInsightsAccessScopeAnalyses`	`RESOURCE_READ`
`DescribeNetworkInsightsAccessScopes`	`RESOURCE_READ`
`DescribeNetworkInsightsAnalyses`	`RESOURCE_READ`
`DescribeNetworkInsightsPaths`	`RESOURCE_READ`
`DescribeNetworkInterfaceAttribute`	`RESOURCE_READ`
`DescribeNetworkInterfaces`	`RESOURCE_READ`
`DescribePlacementGroups`	`RESOURCE_READ`
`DescribePrefixLists`	`RESOURCE_READ`
`DescribePublicIpv4Pools`	`RESOURCE_READ`
`DescribeRegions`	`RESOURCE_READ`
`DescribeReplaceRootVolumeTasks`	`RESOURCE_READ`
`DescribeReservedInstances`	`RESOURCE_READ`
`DescribeReservedInstancesListings`	`RESOURCE_READ`
`DescribeReservedInstancesModifications`	`RESOURCE_READ`
`DescribeReservedInstancesOfferings`	`RESOURCE_READ`
`DescribeRouteTables`	`RESOURCE_READ`
`DescribeSecurityGroupRules`	`RESOURCE_READ`
`DescribeSecurityGroups`	`RESOURCE_READ`
`DescribeSnapshotAttribute`	`RESOURCE_READ`
`DescribeSnapshots`	`RESOURCE_READ`
`DescribeSnapshotTierStatus`	`RESOURCE_READ`
`DescribeSpotFleetRequests`	`RESOURCE_READ`
`DescribeSpotInstanceRequests`	`RESOURCE_READ`
`DescribeSubnets`	`RESOURCE_READ`
`DescribeTags`	`RESOURCE_READ`
`DescribeTrafficMirrorFilters`	`RESOURCE_READ`
`DescribeTrafficMirrorSessions`	`RESOURCE_READ`
`DescribeTrafficMirrorTargets`	`RESOURCE_READ`
`DescribeTransitGatewayAttachments`	`RESOURCE_READ`
`DescribeTransitGatewayConnectPeers`	`RESOURCE_READ`
`DescribeTransitGatewayConnects`	`RESOURCE_READ`
`DescribeTransitGatewayMulticastDomains`	`RESOURCE_READ`
`DescribeTransitGatewayPeeringAttachments`	`RESOURCE_READ`
`DescribeTransitGatewayPolicyTables`	`RESOURCE_READ`
`DescribeTransitGatewayRouteTableAnnouncements`	`RESOURCE_READ`
`DescribeTransitGatewayRouteTables`	`RESOURCE_READ`
`DescribeTransitGateways`	`RESOURCE_READ`
`DescribeTransitGatewayVpcAttachments`	`RESOURCE_READ`
`DescribeVerifiedAccessGroups`	`RESOURCE_READ`
`DescribeVerifiedAccessInstances`	`RESOURCE_READ`
`DescribeVerifiedAccessTrustProviders`	`RESOURCE_READ`
`DescribeVolumeAttribute`	`RESOURCE_READ`
`DescribeVolumes`	`RESOURCE_READ`
`DescribeVolumesModifications`	`RESOURCE_READ`
`DescribeVolumeStatus`	`RESOURCE_READ`
`DescribeVpcAttribute`	`RESOURCE_READ`
`DescribeVpcClassicLink`	`RESOURCE_READ`
`DescribeVpcClassicLinkDnsSupport`	`RESOURCE_READ`
`DescribeVpcEndpointConnectionNotifications`	`RESOURCE_READ`
`DescribeVpcEndpointConnections`	`RESOURCE_READ`
`DescribeVpcEndpoints`	`RESOURCE_READ`
`DescribeVpcEndpointServiceConfigurations`	`RESOURCE_READ`
`DescribeVpcEndpointServicePermissions`	`RESOURCE_READ`
`DescribeVpcEndpointServices`	`RESOURCE_READ`
`DescribeVpcPeeringConnections`	`RESOURCE_READ`
`DescribeVpcs`	`RESOURCE_READ`
`DescribeVpnConnections`	`RESOURCE_READ`
`DescribeVpnGateways`	`RESOURCE_READ`
`DetachInternetGateway`	`RESOURCE_WRITTEN`
`DetachNetworkInterface`	`RESOURCE_WRITTEN`
`DetachVolume`	`RESOURCE_WRITTEN`
`DetachVpnGateway`	`RESOURCE_WRITTEN`
`DisassociateAddress`	`RESOURCE_WRITTEN`
`DisassociateRouteTable`	`RESOURCE_WRITTEN`
`EnableSerialConsoleAccess`	`RESOURCE_WRITTEN`
`GetAssociatedEnclaveCertificateIamRoles`	`RESOURCE_READ`
`GetCapacityReservationAccountAttribute`	`RESOURCE_READ`
`GetConsoleOutput`	`RESOURCE_READ`
`GetConsoleScreenshot`	`RESOURCE_READ`
`GetDefaultCreditSpecification`	`RESOURCE_READ`
`GetEbsDefaultKmsKeyId`	`RESOURCE_READ`
`GetEbsEncryptionByDefault`	`RESOURCE_READ`
`GetManagedPrefixListAssociations`	`RESOURCE_READ`
`GetManagedPrefixListEntries`	`RESOURCE_READ`
`GetPasswordData`	`RESOURCE_READ`
`GetSerialConsoleAccessStatus`	`RESOURCE_READ`
`GetSnapshotBlockPublicAccessState`	`RESOURCE_READ`
`GetSubnetCidrReservations`	`RESOURCE_READ`
`GetVpnConnectionDeviceSampleConfiguration`	`RESOURCE_READ`
`ModifyDefaultCreditSpecification`	`RESOURCE_WRITTEN`
`ModifyImageAttribute`	`RESOURCE_PERMISSIONS_CHANGE`
`ModifyInstanceAttribute`	`RESOURCE_WRITTEN`
`ModifyInstanceMetadataOptions`	`RESOURCE_WRITTEN`
`ModifyNetworkInterfaceAttribute`	`RESOURCE_WRITTEN`
`ModifySecurityGroupRules`	`RESOURCE_WRITTEN`
`ModifySubnetAttribute`	`RESOURCE_WRITTEN`
`ModifyVolume`	`RESOURCE_WRITTEN`
`ModifyVpcAttribute`	`RESOURCE_WRITTEN`
`ModifyVpcEndpoint`	`RESOURCE_WRITTEN`
`ModifyVpcEndpointServiceConfiguration`	`RESOURCE_WRITTEN`
`ModifyVpcEndpointServicePermissions`	`RESOURCE_PERMISSIONS_CHANGE`
`ModifyVpnConnectionOptions`	`RESOURCE_WRITTEN`
`ModifyVpnTunnelOptions`	`RESOURCE_WRITTEN`
`RebootInstances`	`RESOURCE_WRITTEN`
`RegisterImage`	`RESOURCE_WRITTEN`
`ReleaseAddress`	`RESOURCE_DELETION`
`ReplaceIamInstanceProfileAssociation`	`RESOURCE_WRITTEN`
`ReplaceRoute`	`RESOURCE_WRITTEN`
`ReplaceVpnTunnel`	`RESOURCE_WRITTEN`
`RevokeSecurityGroupEgress`	`RESOURCE_PERMISSIONS_CHANGE`
`RevokeSecurityGroupIngress`	`RESOURCE_PERMISSIONS_CHANGE`
`RunInstances`	`RESOURCE_CREATION`
`SharedSnapshotVolumeCreated`	`RESOURCE_CREATION`
`StartInstances`	`STATUS_STARTUP`
`StartNetworkInsightsAccessScopeAnalysis`	`STATUS_STARTUP`
`StartNetworkInsightsAnalysis`	`STATUS_STARTUP`
`StopInstances`	`STATUS_SHUTDOWN`
`TerminateInstances`	`RESOURCE_DELETION`
`UpdateSecurityGroupRuleDescriptionsIngress`	`RESOURCE_WRITTEN`
`DescribeRepositories`	`RESOURCE_READ`
`DescribeRegistries`	`RESOURCE_READ`
`BatchCheckLayerAvailability`	`RESOURCE_READ`
`BatchDeleteImage`	`RESOURCE_DELETION`
`BatchGetImage`	`RESOURCE_READ`
`BatchGetRepositoryScanningConfiguration`	`RESOURCE_READ`
`CompleteLayerUpload`	`STATUS_UPDATE`
`CreateRepository`	`RESOURCE_CREATION`
`DeleteRepository`	`RESOURCE_DELETION`
`DescribeImageReplicationStatus`	`RESOURCE_READ`
`DescribePullThroughCacheRules`	`RESOURCE_READ`
`DescribeRepositories`	`RESOURCE_READ`
`DescribeRepositoryCreationTemplates`	`RESOURCE_READ`
`GetAuthorizationToken`	`RESOURCE_READ`
`GetDownloadUrlForLayer`	`RESOURCE_READ`
`GetLifecyclePolicy`	`RESOURCE_READ`
`GetRegistryPolicy`	`RESOURCE_READ`
`GetRegistryScanningConfiguration`	`RESOURCE_READ`
`GetRepositoryPolicy`	`RESOURCE_READ`
`InitiateLayerUpload`	`RESOURCE_WRITTEN`
`PolicyExecutionEvent`	`STATUS_UPDATE`
`PutImage`	`PutImage`
`UploadLayerPart`	`RESOURCE_CREATION`
`ListTagsForResource`	`RESOURCE_READ`
`DescribeImages`	`RESOURCE_READ`
`DescribeRegistry`	`RESOURCE_READ`
`TagResource`	`RESOURCE_WRITTEN`
`UntagResource`	`RESOURCE_WRITTEN`
`ListImages`	`RESOURCE_READ`
`CreateService`	`RESOURCE_CREATION`
`DeleteService`	`RESOURCE_DELETION`
`DeleteTaskDefinitions`	`RESOURCE_DELETION`
`DeregisterTaskDefinition`	`RESOURCE_WRITTEN`
`DescribeCapacityProviders`	`RESOURCE_READ`
`DescribeTaskDefinition`	`RESOURCE_READ`
`DescribeTasks`	`RESOURCE_READ`
`ListAccountSettings`	`RESOURCE_READ`
`ListClusters`	`RESOURCE_READ`
`ListContainerInstances`	`RESOURCE_READ`
`ListTaskDefinitionFamilies`	`RESOURCE_READ`
`ListTaskDefinitions`	`RESOURCE_READ`
`ListTasks`	`RESOURCE_READ`
`PutAccountSettingDefault`	`RESOURCE_WRITTEN`
`RegisterTaskDefinition`	`RESOURCE_WRITTEN`
`RunTask`	`RESOURCE_WRITTEN`
`UpdateService`	`RESOURCE_WRITTEN`
`AccessKubernetesApi`	`RESOURCE_READ`
`CreateAddon`	`RESOURCE_CREATION`
`CreateCluster`	`RESOURCE_CREATION`
`CreateFargateProfile`	`RESOURCE_CREATION`
`CreateNodegroup`	`RESOURCE_CREATION`
`DeleteAddon`	`RESOURCE_DELETION`
`DeleteCluster`	`RESOURCE_DELETION`
`DeleteFargateProfile`	`RESOURCE_DELETION`
`DeleteNodegroup`	`RESOURCE_DELETION`
`DescribeAccessEntry`	`RESOURCE_READ`
`DescribeAddon`	`RESOURCE_READ`
`DescribeAddonConfiguration`	`RESOURCE_READ`
`DescribeAddonVersions`	`RESOURCE_READ`
`DescribeCluster`	`RESOURCE_READ`
`DescribeFargateProfile`	`RESOURCE_READ`
`DescribeNodegroup`	`RESOURCE_READ`
`DescribeUpdate`	`RESOURCE_READ`
`ListAccessEntries`	`RESOURCE_READ`
`ListAddons`	`RESOURCE_READ`
`ListClusters`	`RESOURCE_READ`
`ListFargateProfiles`	`RESOURCE_READ`
`ListInsights`	`RESOURCE_READ`
`ListNodegroups`	`RESOURCE_READ`
`ListUpdates`	`RESOURCE_READ`
`TagResource`	`RESOURCE_WRITTEN`
`UpdateAddon`	`RESOURCE_WRITTEN`
`UpdateClusterConfig`	`RESOURCE_WRITTEN`
`UpdateClusterVersion`	`RESOURCE_WRITTEN`
`UpdateNodegroupConfig`	`RESOURCE_WRITTEN`
`UpdateNodegroupVersion`	`RESOURCE_WRITTEN`
`CreateReplicationGroup`	`GROUP_CREATION`
`CreateServerlessCache`	`RESOURCE_CREATION`
`DeleteReplicationGroup`	`GROUP_DELETION`
`DeleteServerlessCache`	`RESOURCE_DELETION`
`DescribeCacheClusters`	`RESOURCE_READ`
`DescribeCacheEngineVersions`	`RESOURCE_READ`
`DescribeCacheParameterGroups`	`GROUP_UNCATEGORIZED`
`DescribeCacheSecurityGroups`	`GROUP_UNCATEGORIZED`
`DescribeCacheSubnetGroups`	`GROUP_UNCATEGORIZED`
`DescribeGlobalReplicationGroups`	`GROUP_UNCATEGORIZED`
`DescribeReplicationGroups`	`GROUP_UNCATEGORIZED`
`DescribeReservedCacheNodes`	`RESOURCE_READ`
`DescribeServerlessCaches`	`RESOURCE_READ`
`DescribeServiceUpdates`	`RESOURCE_READ`
`DescribeUpdateActions`	`RESOURCE_READ`
`DescribeEvents`	`RESOURCE_READ`
`DescribeUsers`	`RESOURCE_READ`
`ListTagsForResource`	`RESOURCE_READ`
`DescribeSnapshots`	`GROUP_UNCATEGORIZED`
`DescribeUserGroups`	`GROUP_UNCATEGORIZED`
`ListAllowedNodeTypeModifications`	`GROUP_UNCATEGORIZED`
`ModifyReplicationGroup`	`GROUP_MODIFICATION`
`ModifyServerlessCache`	`RESOURCE_WRITTEN`
`AddListenerCertificates`	`RESOURCE_WRITTEN`
`AddTags`	`RESOURCE_WRITTEN`
`ConfigureHealthCheck`	`SETTING_CREATION`
`CreateListener`	`RESOURCE_CREATION`
`CreateLoadBalancer`	`RESOURCE_CREATION`
`CreateLoadBalancerPolicy`	`RESOURCE_CREATION`
`CreateRule`	`RESOURCE_CREATION`
`CreateTargetGroup`	`GROUP_CREATION`
`DeleteListener`	`RESOURCE_DELETION`
`DeleteLoadBalancer`	`RESOURCE_DELETION`
`DeleteRule`	`RESOURCE_DELETION`
`DeleteTargetGroup`	`GROUP_DELETION`
`DeregisterInstancesFromLoadBalancer`	`RESOURCE_WRITTEN`
`DeregisterTargets`	`RESOURCE_WRITTEN`
`DescribeAccountLimits`	`RESOURCE_READ`
`DescribeInstanceHealth`	`RESOURCE_READ`
`DescribeListenerCertificates`	`RESOURCE_READ`
`DescribeListeners`	`RESOURCE_READ`
`DescribeLoadBalancerAttributes`	`RESOURCE_READ`
`DescribeLoadBalancerPolicies`	`RESOURCE_READ`
`DescribeLoadBalancers`	`RESOURCE_READ`
`DescribeRules`	`RESOURCE_READ`
`DescribeSSLPolicies`	`RESOURCE_READ`
`DescribeTags`	`RESOURCE_READ`
`DescribeTargetGroupAttributes`	`RESOURCE_READ`
`DescribeTargetGroups`	`RESOURCE_READ`
`DescribeTargetHealth`	`RESOURCE_READ`
`ModifyListener`	`RESOURCE_WRITTEN`
`ModifyLoadBalancerAttributes`	`RESOURCE_WRITTEN`
`ModifyRule`	`RESOURCE_WRITTEN`
`ModifyTargetGroup`	`RESOURCE_WRITTEN`
`ModifyTargetGroupAttributes`	`RESOURCE_WRITTEN`
`RegisterInstancesWithLoadBalancer`	`RESOURCE_WRITTEN`
`RegisterTargets`	`RESOURCE_WRITTEN`
`RemoveListenerCertificates`	`RESOURCE_WRITTEN`
`RemoveTags`	`RESOURCE_WRITTEN`
`SetRulePriorities`	`RESOURCE_PERMISSIONS_CHANGE`
`DeleteDeliveryStream`	`RESOURCE_DELETION`
`DescribeDeliveryStream`	`RESOURCE_READ`
`ListDeliveryStreams`	`RESOURCE_READ`
`ListTagsForDeliveryStream`	`RESOURCE_READ`
`CreateDetector`	`RESOURCE_CREATION`
`CreateMembers`	`RESOURCE_CREATION`
`CreatePublishingDestination`	`RESOURCE_CREATION`
`CreateSampleFindings`	`RESOURCE_CREATION`
`DescribePublishingDestination`	`RESOURCE_READ`
`EnableOrganizationAdminAccount`	`RESOURCE_PERMISSIONS_CHANGE`
`GetDetector`	`RESOURCE_READ`
`GetFindingsStatistics`	`RESOURCE_READ`
`GetInvitationsCount`	`RESOURCE_READ`
`GetMasterAccount`	`RESOURCE_READ`
`GetMemberDetectors`	`RESOURCE_READ`
`GetOrganizationStatistics`	`RESOURCE_READ`
`ListDetectors`	`RESOURCE_READ`
`ListFilters`	`RESOURCE_READ`
`ListFindings`	`RESOURCE_READ`
`ListIPSets`	`RESOURCE_READ`
`ListThreatIntelSets`	`RESOURCE_READ`
`UpdateOrganizationConfiguration`	`RESOURCE_PERMISSIONS_CHANGE`
`DescribeAffectedEntities`	`RESOURCE_READ`
`DescribeEntityAggregates`	`RESOURCE_READ`
`DescribeEventAggregates`	`RESOURCE_READ`
`DescribeEventDetails`	`RESOURCE_READ`
`DescribeHealthServiceStatusForOrganization`	`GENRIC_EVENT`
`AddRoleToInstanceProfile`	`RESOURCE_PERMISSIONS_CHANGE`
`AddUserToGroup`	`GROUP_MODIFICATION`
`AttachGroupPolicy`	`GROUP_MODIFICATION`
`AttachRolePolicy`	`RESOURCE_PERMISSIONS_CHANGE`
`AttachUserPolicy`	`RESOURCE_PERMISSIONS_CHANGE`
`ChangePassword`	`USER_CHANGE_PASSWORD`
`CreateAccessKey`	`RESOURCE_CREATION`
`CreateGroup`	`GROUP_CREATION`
`CreateInstanceProfile`	`RESOURCE_CREATION`
`CreateLoginProfile`	`RESOURCE_WRITTEN`
`CreateOpenIDConnectProvider`	`RESOURCE_CREATION`
`CreatePolicy`	`RESOURCE_CREATION`
`CreatePolicyVersion`	`RESOURCE_CREATION`
`CreateRole`	`RESOURCE_CREATION`
`CreateSAMLProvider`	`RESOURCE_CREATION`
`CreateServiceLinkedRole`	`RESOURCE_CREATION`
`CreateUser`	`USER_CREATION`
`CreateVirtualMFADevice`	`RESOURCE_CREATION`
`DeactivateMFADevice`	`RESOURCE_DELETION`
`DeleteAccessKey`	`RESOURCE_DELETION`
`DeleteInstanceProfile`	`RESOURCE_DELETION`
`DeleteLoginProfile`	`RESOURCE_WRITTEN`
`DeletePolicyVersion`	`RESOURCE_DELETION`
`DeleteRole`	`RESOURCE_DELETION`
`DeleteRolePolicy`	`RESOURCE_DELETION`
`DeleteServiceLinkedRole`	`RESOURCE_DELETION`
`DeleteUser`	`USER_DELETION`
`DeleteUserPolicy`	`RESOURCE_PERMISSIONS_CHANGE`
`DeleteVirtualMFADevice`	`RESOURCE_DELETION`
`DetachRolePolicy`	`RESOURCE_PERMISSIONS_CHANGE`
`DetachUserPolicy`	`RESOURCE_PERMISSIONS_CHANGE`
`EnableMFADevice`	`RESOURCE_WRITTEN`
`GenerateCredentialReport`	`RESOURCE_READ`
`GenerateServiceLastAccessedDetails`	`RESOURCE_READ`
`GetAccessKeyLastUsed`	`RESOURCE_READ`
`GetAccountAuthorizationDetails`	`RESOURCE_READ`
`GetAccountEmailAddress`	`RESOURCE_READ`
`GetAccountName`	`RESOURCE_READ`
`GetAccountPasswordPolicy`	`RESOURCE_READ`
`GetAccountSummary`	`RESOURCE_READ`
`GetCredentialReport`	`RESOURCE_READ`
`GetGroupPolicy`	`RESOURCE_READ`
`GetInstanceProfile`	`RESOURCE_READ`
`GetLoginProfile`	`RESOURCE_READ`
`GetMFADevice`	`RESOURCE_READ`
`GetOpenIDConnectProvider`	`RESOURCE_READ`
`GetPolicyVersion`	`RESOURCE_READ`
`GetRole`	`RESOURCE_READ`
`GetRolePolicy`	`RESOURCE_READ`
`GetSAMLProvider`	`RESOURCE_READ`
`GetServiceLastAccessedDetails`	`RESOURCE_READ`
`GetUser`	`RESOURCE_READ`
`GetUserPolicy`	`RESOURCE_READ`
`ListAccessKeys`	`RESOURCE_READ`
`ListAccountAliases`	`RESOURCE_READ`
`ListAttachedGroupPolicies`	`RESOURCE_READ`
`ListAttachedRolePolicies`	`RESOURCE_READ`
`ListAttachedUserPolicies`	`RESOURCE_READ`
`ListEntitiesForPolicy`	`RESOURCE_READ`
`ListGroupPolicies`	`RESOURCE_READ`
`ListGroupsForUser`	`RESOURCE_READ`
`ListInstanceProfiles`	`RESOURCE_READ`
`ListInstanceProfilesForRole`	`RESOURCE_READ`
`ListMFADevices`	`RESOURCE_READ`
`ListOpenIDConnectProviders`	`RESOURCE_READ`
`ListPolicies`	`RESOURCE_READ`
`ListPoliciesGrantingServiceAccess`	`RESOURCE_READ`
`ListPolicyVersions`	`RESOURCE_READ`
`ListRolePolicies`	`RESOURCE_READ`
`ListRoles`	`RESOURCE_READ`
`ListRoleTags`	`RESOURCE_READ`
`ListSAMLProviders`	`RESOURCE_READ`
`ListSAMLProviderTags`	`RESOURCE_READ`
`ListServerCertificates`	`RESOURCE_READ`
`ListServiceSpecificCredentials`	`RESOURCE_READ`
`ListSigningCertificates`	`RESOURCE_READ`
`ListSSHPublicKeys`	`RESOURCE_READ`
`ListSTSRegionalEndpointsStatus`	`RESOURCE_READ`
`ListUserPolicies`	`RESOURCE_READ`
`ListUsers`	`RESOURCE_READ`
`ListUserTags`	`RESOURCE_READ`
`ListVirtualMFADevices`	`RESOURCE_READ`
`PutRolePolicy`	`RESOURCE_PERMISSIONS_CHANGE`
`PutUserPolicy`	`RESOURCE_PERMISSIONS_CHANGE`
`RemoveRoleFromInstanceProfile`	`RESOURCE_PERMISSIONS_CHANGE`
`RemoveUserFromGroup`	`GROUP_MODIFICATION`
`ResyncMFADevice`	`RESOURCE_WRITTEN`
`SimulatePrincipalPolicy`	`RESOURCE_WRITTEN`
`TagUser`	`RESOURCE_WRITTEN`
`UpdateAccessKey`	`RESOURCE_PERMISSIONS_CHANGE`
`UpdateAssumeRolePolicy`	`RESOURCE_PERMISSIONS_CHANGE`
`UpdateLoginProfile`	`USER_CHANGE_PASSWORD`
`UpdateSAMLProvider`	`RESOURCE_WRITTEN`
`ListContainerRecipes`	`GENERIC_EVENT`
`ListDistributionConfigurations`	`GENERIC_EVENT`
`ListImagePipelines`	`GENERIC_EVENT`
`ListImageRecipes`	`GENERIC_EVENT`
`ListImages`	`GENERIC_EVENT`
`ListInfrastructureConfigurations`	`GENERIC_EVENT`
`DeleteStream`	`RESOURCE_DELETION`
`DescribeLimits`	`RESOURCE_READ`
`DescribeStream`	`RESOURCE_READ`
`DescribeStreamSummary`	`RESOURCE_READ`
`ListStreamConsumers`	`RESOURCE_READ`
`ListStreams`	`RESOURCE_READ`
`DescribeApplication`	`RESOURCE_READ`
`ListApplications`	`RESOURCE_READ`
`ListSignalingChannels`	`RESOURCE_READ`
`CreateAlias`	`RESOURCE_WRITTEN`
`CreateGrant`	`RESOURCE_WRITTEN`
`CreateKey`	`RESOURCE_CREATION`
`Decrypt`	`RESOURCE_READ`
`DeleteKey`	`RESOURCE_DELETION`
`DescribeKey`	`RESOURCE_READ`
`DisableKey`	`RESOURCE_WRITTEN`
`Encrypt`	`RESOURCE_READ`
`GenerateDataKey`	`RESOURCE_CREATION`
`GenerateDataKeyWithoutPlaintext`	`RESOURCE_CREATION`
`GetKeyPolicy`	`RESOURCE_READ`
`GetKeyRotationStatus`	`RESOURCE_READ`
`ListAliases`	`RESOURCE_READ`
`ListGrants`	`RESOURCE_READ`
`ListKeys`	`RESOURCE_READ`
`ListResourceTags`	`RESOURCE_READ`
`PutKeyPolicy`	`RESOURCE_CREATION`
`ReEncrypt`	`RESOUECE_READ`
`RetireGrant`	`RESOURCE_WRITTEN`
`RotateKey`	`RESOURCE_WRITTEN`
`ScheduleKeyDeletion`	`RESOURCE_DELETION`
`Sign`	`RESOURCE_PERMISSIONS_CHANGE`
`SynchronizeMultiRegionKey`	`RESOURCE_WRITTEN`
`AddPermission20150331`	`RESOURCE_PERMISSIONS_CHANGE`
`AddPermission20150331v2`	`RESOURCE_PERMISSIONS_CHANGE`
`CreateAlias20150331`	`RESOURCE_CREATION`
`CreateEventSourceMapping20150331`	`RESOURCE_CREATION`
`CreateFunction20150331`	`RESOURCE_CREATION`
`DeleteAlias20150331`	`RESOURCE_DELETION`
`DeleteEventSourceMapping20150331`	`RESOURCE_DELETION`
`DeleteFunction20150331`	`RESOURCE_DELETION`
`DeleteLayerVersion20181031`	`RESOURCE_DELETION`
`DisableReplication20170630`	`RESOURCE_PERMISSIONS_CHANGE`
`EnableReplication20170630v2`	`RESOURCE_PERMISSIONS_CHANGE`
`GetAccountSettings20160819`	`RESOURCE_READ`
`GetEventSourceMapping20150331`	`RESOURCE_READ`
`GetFunction20150331v2`	`RESOURCE_READ`
`GetFunctionCodeSigningConfig`	`RESOURCE_READ`
`GetFunctionConfiguration20150331v2`	`RESOURCE_READ`
`GetFunctionEventInvokeConfig`	`RESOURCE_READ`
`GetFunctionUrlConfig`	`RESOURCE_READ`
`GetLayerVersion20181031`	`RESOURCE_READ`
`GetLayerVersionByArn20181031`	`RESOURCE_READ`
`GetLayerVersionPolicy20181031`	`RESOURCE_READ`
`GetPolicy20150331`	`RESOURCE_READ`
`GetPolicy20150331v2`	`RESOURCE_READ`
`GetProvisionedConcurrencyConfig`	`RESOURCE_READ`
`GetRuntimeManagementConfig`	`RESOURCE_READ`
`Invoke`	`RESOURCE_WRITTEN`
`InvokeExecution`	`RESOURCE_WRITTEN`
`ListAliases20150331`	`RESOURCE_READ`
`ListCodeSigningConfigs`	`RESOURCE_READ`
`ListEventSourceMappings20150331`	`RESOURCE_READ`
`ListFunctionEventInvokeConfigs`	`RESOURCE_READ`
`ListFunctions20150331`	`RESOURCE_READ`
`ListFunctionUrlConfigs`	`RESOURCE_READ`
`ListLayers20181031`	`RESOURCE_READ`
`ListLayerVersions20181031`	`RESOURCE_READ`
`ListProvisionedConcurrencyConfigs`	`RESOURCE_READ`
`ListTags20170331`	`RESOURCE_READ`
`ListVersionsByFunction20150331`	`RESOURCE_READ`
`PublishLayerVersion20181031`	`RESOURCE_WRITTEN`
`PublishVersion20150331`	`RESOURCE_WRITTEN`
`RemovePermission20150331v2`	`RESOURCE_WRITTEN`
`TagResource20170331v2`	`RESOURCE_WRITTEN`
`UntagResource20170331v2`	`RESOURCE_WRITTEN`
`UpdateAlias20150331`	`RESOURCE_WRITTEN`
`UpdateEventSourceMapping20150331`	`RESOURCE_WRITTEN`
`UpdateFunctionCode20150331v2`	`RESOURCE_WRITTEN`
`UpdateFunctionConfiguration20150331v2`	`RESOURCE_WRITTEN`
`GetMacieSession`	`RESOURCE_READ`
`ListClassificationJobs`	`RESOURCE_READ`
`ListCustomDataIdentifiers`	`RESOURCE_READ`
`ListFindingsFilters`	`RESOURCE_READ`
`ListOrganizationAdminAccounts`	`RESOURCE_READ`
`DescribeRuleGroupMetadata`	`RESOURCE_READ`
`ListFirewallPolicies`	`RESOURCE_READ`
`ListFirewalls`	`RESOURCE_READ`
`UpdateRuleGroup`	`RESOURCE_PERMISSIONS_CHANGE`
`AcceptHandshake`	`STATUS_UPDATE`
`CloseAccount`	`RESOURCE_DELETION`
`CloseAccountResult`	`RESOURCE_DELETION`
`CreateAccount`	`RESOURCE_CREATION`
`CreateAccountResult`	`RESOURCE_CREATION`
`DescribeAccount`	`RESOURCE_READ`
`DescribeOrganization`	`RESOURCE_READ`
`DescribeOrganizationalUnit`	`RESOURCE_READ`
`DescribePolicy`	`RESOURCE_READ`
`DescribeResourcePolicy`	`RESOURCE_READ`
`EnableAWSServiceAccess`	`RESOURCE_PERMISSIONS_CHANGE`
`EnablePolicyType`	`RESOURCE_PERMISSIONS_CHANGE`
`InviteAccountToOrganization`	`RESOURCE_PERMISSIONS_CHANGE`
`ListAccounts`	`RESOURCE_READ`
`ListAccountsForParent`	`RESOURCE_READ`
`ListAWSServiceAccessForOrganization`	`RESOURCE_READ`
`ListCreateAccountStatus`	`RESOURCE_READ`
`ListDelegatedAdministrators`	`RESOURCE_READ`
`ListHandshakesForAccount`	`RESOURCE_READ`
`ListHandshakesForOrganization`	`RESOURCE_READ`
`ListOrganizationalUnitsForParent`	`RESOURCE_READ`
`ListParents`	`RESOURCE_READ`
`ListPolicies`	`RESOURCE_READ`
`ListPoliciesForTarget`	`RESOURCE_READ`
`ListRoots`	`RESOURCE_READ`
`ListTagsForResource`	`RESOURCE_READ`
`MoveAccount`	`RESOURCE_WRITTEN`
`RegisterDelegatedAdministrator`	`USER_RESOURCE_UPDATE_CONTENT`
`DescribeAccountSubscription`	`RESOURCE_READ`
`GetAnalysis`	`RESOURCE_READ`
`ListDataSets`	`RESOURCE_READ`
`ListDataSources`	`RESOURCE_READ`
`AcceptResourceShareInvitation`	`RESOURCE_WRITTEN`
`GetResourceShareAssociations`	`RESOURCE_READ`
`GetResourceShareInvitations`	`RESOURCE_READ`
`GetResourceShares`	`RESOURCE_READ`
`ListPrincipals`	`RESOURCE_READ`
`ListResourceSharePermissions`	`RESOURCE_READ`
`ListResourceTypes`	`RESOURCE_READ`
`AddTagsToResource`	`RESOURCE_WRITTEN`
`ApplyPendingMaintenanceAction`	`RESOURCE_WRITTEN`
`CopyDBClusterSnapshot`	`RESOURCE_WRITTEN`
`CopyDBParameterGroup`	`RESOURCE_WRITTEN`
`CopyDBSnapshot`	`RESOURCE_WRITTEN`
`CreateDBCluster`	`RESOURCE_CREATION`
`CreateDBClusterSnapshot`	`RESOURCE_CREATION`
`CreateDBInstance`	`RESOURCE_CREATION`
`CreateDBParameterGroup`	`RESOURCE_CREATION`
`CreateDBSnapshot`	`RESOURCE_CREATION`
`CreateDBSubnetGroup`	`RESOURCE_CREATION`
`DeleteDBCluster`	`RESOURCE_DELETION`
`DeleteDBClusterSnapshot`	`RESOURCE_DELETION`
`DeleteDBInstance`	`RESOURCE_DELETION`
`DeleteDBParameterGroup`	`RESOURCE_DELETION`
`DeleteDBSnapshot`	`RESOURCE_DELETION`
`DeleteDBSubnetGroup`	`RESOURCE_DELETION`
`DescribeBlueGreenDeployments`	`RESOURCE_READ`
`DescribeCertificates`	`RESOURCE_READ`
`DescribeDBClusterAutomatedBackups`	`RESOURCE_READ`
`DescribeDBClusterEndpoints`	`RESOURCE_READ`
`DescribeDBClusterParameterGroups`	`RESOURCE_READ`
`DescribeDBClusterParameters`	`RESOURCE_READ`
`DescribeDBClusters`	`RESOURCE_READ`
`DescribeDBClusterSnapshotAttributes`	`RESOURCE_READ`
`DescribeDBClusterSnapshots`	`RESOURCE_READ`
`DescribeDBEngineVersions`	`RESOURCE_READ`
`DescribeDBInstanceAutomatedBackups`	`RESOURCE_READ`
`DescribeDBInstances`	`RESOURCE_READ`
`DescribeDBLogFiles`	`RESOURCE_READ`
`DescribeDBParameterGroups`	`RESOURCE_READ`
`DescribeDBParameters`	`RESOURCE_READ`
`DescribeDBProxies`	`RESOURCE_READ`
`DescribeDBProxyEndpoints`	`RESOURCE_READ`
`DescribeDBProxyTargetGroups`	`RESOURCE_READ`
`DescribeDBProxyTargets`	`RESOURCE_READ`
`DescribeDBRecommendations`	`RESOURCE_READ`
`DescribeDBSecurityGroups`	`RESOURCE_READ`
`DescribeDBSnapshotAttributes`	`RESOURCE_READ`
`DescribeDBSnapshots`	`RESOURCE_READ`
`DescribeDBSubnetGroups`	`RESOURCE_READ`
`DescribeEngineDefaultParameters`	`RESOURCE_READ`
`DescribeExportTasks`	`RESOURCE_READ`
`DescribeGlobalClusters`	`RESOURCE_READ`
`DescribeOptionGroups`	`RESOURCE_READ`
`DescribeOrderableDBInstanceOptions`	`RESOURCE_READ`
`DescribePendingMaintenanceActions`	`RESOURCE_READ`
`DescribeRecommendationGroups`	`RESOURCE_READ`
`DescribeRecommendations`	`RESOURCE_READ`
`DescribeReservedDBInstances`	`RESOURCE_READ`
`DescribeReservedDBInstancesOfferings`	`RESOURCE_READ`
`DescribeTenantDatabases`	`RESOURCE_READ`
`DescribeValidDBInstanceModifications`	`RESOURCE_READ`
`DownloadDBLogFilePortion`	`RESOURCE_READ`
`FailoverDBCluster`	`RESOURCE_WRITTEN`
`ListTagsForResource`	`RESOURCE_READ`
`ModifyDBCluster`	`RESOURCE_WRITTEN`
`ModifyDBClusterSnapshotAttribute`	`RESOURCE_WRITTEN`
`ModifyDBInstance`	`RESOURCE_WRITTEN`
`ModifyDBParameterGroup`	`RESOURCE_WRITTEN`
`RebootDBInstance`	`RESOURCE_WRITTEN`
`RemoveTagsFromResource`	`RESOURCE_WRITTEN`
`RestoreDBInstanceFromDBSnapshot`	`RESOURCE_WRITTEN`
`StartExportTask`	`STATUS_STARTUP`
`StopDBInstance`	`SERVICE_STOP`
`GetIndex`	`RESOURCE_READ`
`GetView`	`RESOURCE_READ`
`ListIndexes`	`RESOURCE_READ`
`ListViews`	`RESOURCE_READ`
`Search`	`RESOURCE_READ`
`GetGroupConfiguration`	`RESOURCE_READ`
`GetGroupQuery`	`RESOURCE_READ`
`ListGroupResources`	`RESOURCE_READ`
`ListGroups`	`RESOURCE_READ`
`UpdateGroupQuery`	`RESOURCE_WRITTEN`
`CreateGroup`	`GROUP_CREATION`
`GetGroup`	`RESOURCE_READ`
`GetTags`	`RESOURCE_READ`
`ListResourceTypes`	`RESOURCE_READ`
`ListRecoveryGroups`	`RESOURCE_READ`
`ListReadinessChecks`	`RESOURCE_READ`
`AssociateVPCWithHostedZone`	`RESOURCE_WRITTEN`
`ChangeResourceRecordSets`	`RESOURCE_WRITTEN`
`ChangeTagsForResource`	`RESOURCE_WRITTEN`
`CreateHealthCheck`	`RESOURCE_WRITTEN`
`GetAccountLimit`	`RESOURCE_READ`
`GetChange`	`RESOURCE_READ`
`GetDNSSEC`	`RESOURCE_READ`
`GetHealthCheck`	`RESOURCE_READ`
`GetHealthCheckCount`	`RESOURCE_READ`
`GetHostedZone`	`RESOURCE_READ`
`GetHostedZoneCount`	`RESOURCE_READ`
`GetQueryLoggingConfig`	`RESOURCE_READ`
`GetTrafficPolicy`	`RESOURCE_READ`
`GetTrafficPolicyInstanceCount`	`RESOURCE_READ`
`ListCidrCollections`	`RESOURCE_READ`
`ListHealthChecks`	`RESOURCE_READ`
`ListHostedZones`	`RESOURCE_READ`
`ListHostedZonesByName`	`RESOURCE_READ`
`ListQueryLoggingConfigs`	`RESOURCE_READ`
`ListResourceRecordSets`	`RESOURCE_READ`
`ListTagsForResource`	`RESOURCE_READ`
`ListTrafficPolicies`	`RESOURCE_READ`
`ListTrafficPolicyInstancesByPolicy`	`RESOURCE_READ`
`ListTrafficPolicyVersions`	`RESOURCE_READ`
`CheckDomainAvailability`	`RESOURCE_READ`
`CheckDomainTransferability`	`RESOURCE_READ`
`GetContactReachabilityStatus`	`RESOURCE_READ`
`GetDomainDetail`	`RESOURCE_READ`
`GetDomainSuggestions`	`RESOURCE_READ`
`ListDomains`	`RESOURCE_READ`
`ListOperations`	`RESOURCE_READ`
`ListPrices`	`RESOURCE_READ`
`ListTagsForDomain`	`RESOURCE_READ`
`TransferDomain`	`RESOURCE_WRITTEN`
`UpdateDomainContact`	`RESOURCE_WRITTEN`
`UpdateDomainContactPrivacy`	`RESOURCE_PERMISSIONS_CHANGE`
`AssociateResolverRule`	`RESOURCE_WRITTEN`
`GetFirewallConfig`	`RESOURCE_READ`
`GetFirewallDomainList`	`RESOURCE_READ`
`GetResolverConfig`	`RESOURCE_READ`
`GetResolverEndpoint`	`RESOURCE_READ`
`GetResolverRule`	`RESOURCE_READ`
`GetResolverRuleAssociation`	`RESOURCE_READ`
`ListFirewallDomainLists`	`RESOURCE_READ`
`ListFirewallDomains`	`RESOURCE_READ`
`ListFirewallRuleGroupAssociations`	`RESOURCE_READ`
`ListFirewallRuleGroups`	`RESOURCE_READ`
`ListResolverEndpointIpAddresses`	`RESOURCE_READ`
`ListResolverEndpoints`	`RESOURCE_READ`
`ListResolverQueryLogConfigAssociations`	`RESOURCE_READ`
`ListResolverQueryLogConfigs`	`RESOURCE_READ`
`ListResolverRules`	`RESOURCE_READ`
`ListTagsForResource`	`RESOURCE_READ`
`ListEndpoints`	`RESOURCE_READ`
`AbortMultipartUpload`	`RESOURCE_WRITTEN`
`CompleteMultipartUpload`	`STATUS_UPDATE`
`CopyObject`	`RESOURCE_WRITTEN`
`CreateBucket`	`RESOURCE_CREATION`
`CreateMultipartUpload`	`RESOURCE_WRITTEN`
`DeleteBucket`	`RESOURCE_DELETION`
`DeleteBucketPolicy`	`RESOURCE_DELETION`
`DeleteObject`	`RESOURCE_DELETION`
`DeleteObjects`	`RESOURCE_DELETION`
`GetAccelerateConfiguration`	`RESOURCE_READ`
`GetAccessGrantsInstance`	`RESOURCE_READ`
`GetAccessPoint`	`RESOURCE_READ`
`GetAccessPointPolicyStatus`	`RESOURCE_READ`
`GetAccountPublicAccessBlock`	`RESOURCE_READ`
`GetBucketAcl`	`RESOURCE_READ`
`GetBucketAnalyticsConfiguration`	`RESOURCE_READ`
`GetBucketCors`	`RESOURCE_READ`
`GetBucketEncryption`	`RESOURCE_READ`
`GetBucketIntelligentTieringConfiguration`	`RESOURCE_READ`
`GetBucketInventoryConfiguration`	`RESOURCE_READ`
`GetBucketLifecycle`	`RESOURCE_READ`
`GetBucketLocation`	`RESOURCE_READ`
`GetBucketLogging`	`RESOURCE_READ`
`GetBucketMetricsConfiguration`	`RESOURCE_READ`
`GetBucketNotification`	`RESOURCE_READ`
`GetBucketObjectLockConfiguration`	`RESOURCE_READ`
`GetBucketOwnershipControls`	`RESOURCE_READ`
`GetBucketPolicy`	`RESOURCE_READ`
`GetBucketPolicyStatus`	`RESOURCE_READ`
`GetBucketPublicAccessBlock`	`RESOURCE_READ`
`GetBucketReplication`	`RESOURCE_READ`
`GetBucketRequestPayment`	`RESOURCE_READ`
`GetBucketTagging`	`RESOURCE_READ`
`GetBucketVersioning`	`RESOURCE_READ`
`GetBucketWebsite`	`RESOURCE_READ`
`GetObject`	`RESOURCE_READ`
`GetObjectAcl`	`RESOURCE_READ`
`GetObjectLockLegalHold`	`RESOURCE_READ`
`GetObjectTagging`	`RESOURCE_READ`
`GetStorageLensConfiguration`	`RESOURCE_READ`
`GetStorageLensConfigurationTagging`	`RESOURCE_READ`
`GetStorageLensDashboardDataInternal`	`RESOURCE_READ`
`HeadBucket`	`RESOURCE_READ`
`HeadObject`	`RESOURCE_READ`
`ListAccessPoints`	`RESOURCE_READ`
`ListAccessPointsForObjectLambda`	`RESOURCE_READ`
`ListBuckets`	`RESOURCE_READ`
`ListJobs`	`RESOURCE_READ`
`ListMultipartUploads`	`RESOURCE_READ`
`ListMultiRegionAccessPoints`	`RESOURCE_READ`
`ListObjects`	`RESOURCE_READ`
`ListObjectVersions`	`RESOURCE_READ`
`ListParts`	`RESOURCE_READ`
`ListStorageLensConfigurations`	`RESOURCE_READ`
`PreflightRequest`	`STATUS_UPDATE`
`PutBucketAcl`	`RESOURCE_PERMISSIONS_CHANGE`
`PutBucketCors`	`RESOURCE_CREATION`
`PutBucketEncryption`	`RESOURCE_CREATION`
`PutBucketLifecycle`	`RESOURCE_CREATION`
`PutBucketNotification`	`RESOURCE_CREATION`
`PutBucketOwnershipControls`	`RESOURCE_CREATION`
`PutBucketPolicy`	`RESOURCE_CREATION`
`PutBucketPublicAccessBlock`	`RESOURCE_CREATION`
`PutBucketReplication`	`RESOURCE_CREATION`
`PutBucketTagging`	`RESOURCE_CREATION`
`PutBucketVersioning`	`RESOURCE_CREATION`
`PutBucketWebsite`	`RESOURCE_CREATION`
`PutObject`	`RESOURCE_CREATION`
`PutObjectAcl`	`RESOURCE_CREATION`
`UploadPart`	`RESOURCE_PERMISSIONS_CHANGE`
`UploadPartCopy`	`RESOURCE_PERMISSIONS_CHANGE`
`ListAllMyDirectoryBuckets`	`RESOURCE_READ`
`ListDirectoryBuckets`	`RESOURCE_READ`
`CreateSecret`	`RESOURCE_CREATION`
`DescribeSecret`	`RESOURCE_READ`
`GetRandomPassword`	`RESOURCE_READ`
`GetResourcePolicy`	`RESOURCE_READ`
`GetSecretValue`	`RESOURCE_READ`
`ListSecrets`	`RESOURCE_READ`
`ListSecretVersionIds`	`RESOURCE_READ`
`PutSecretValue`	`RESOURCE_CREATION`
`RotationStarted`	`STATUS_STARTUP`
`StartSecretVersionDelete`	`STATUS_STARTUP`
`UpdateSecret`	`RESOURCE_WRITTEN`
`UpdateSecretVersionStage`	`RESOURCE_WRITTEN`
`BatchEnableStandards`	`RESOURCE_WRITTEN`
`BatchGetControlEvaluations`	`RESOURCE_READ`
`BatchGetStandardsControlAssociations`	`RESOURCE_READ`
`BatchUpdateStandardsControlAssociations`	`RESOURCE_WRITTEN`
`DescribeHub`	`RESOURCE_READ`
`DescribeOrganizationConfiguration`	`RESOURCE_READ`
`DescribeStandards`	`RESOURCE_READ`
`DisableSecurityHub`	`RESOURCE_WRITTEN`
`GetAdhocInsightResults`	`RESOURCE_READ`
`GetAdministratorAccount`	`RESOURCE_READ`
`GetControlFindingSummary`	`RESOURCE_READ`
`GetFindings`	`RESOURCE_READ`
`GetInsightResults`	`RESOURCE_READ`
`ListControlEvaluationSummaries`	`RESOURCE_READ`
`ListEnabledProductsForImport`	`RESOURCE_READ`
`ListMembers`	`RESOURCE_READ`
`ListSecurityControlDefinitions`	`RESOURCE_READ`
`UpdateSecurityHubConfiguration`	`RESOURCE_WRITTEN`
`CreateConfigurationSet`	`RESOURCE_CREATION`
`CreateApiMapping`	`RESOURCE_CREATION`
`CreateResource`	`RESOURCE_CREATION`
`CreateRestApi`	`RESOURCE_CREATION`
`CreateStage`	`RESOURCE_CREATION`
`DeleteRestApi`	`RESOURCE_DELETION`
`GetAccount`	`RESOURCE_READ`
`GetApi`	`RESOURCE_READ`
`GetApiKeys`	`RESOURCE_READ`
`GetApiMappings`	`RESOURCE_READ`
`GetApis`	`RESOURCE_READ`
`GetAuthorizers`	`RESOURCE_READ`
`GetClientCertificates`	`RESOURCE_READ`
`GetDocumentationParts`	`RESOURCE_READ`
`GetDomainNames`	`RESOURCE_READ`
`GetRestApis`	`RESOURCE_READ`
`GetRoutes`	`RESOURCE_READ`
`GetStage`	`RESOURCE_READ`
`GetStages`	`RESOURCE_READ`
`GetUsagePlans`	`RESOURCE_READ`
`ImportApi`	`RESOURCE_CREATION`
`UpdateApi`	`RESOURCE_WRITTEN`
`CreateEmailIdentity`	`RESOURCE_CREATION`
`CreateTemplate`	`RESOURCE_CREATION`
`DeleteSuppressedDestination`	`RESOURCE_DELETION`
`DeleteTemplate`	`RESOURCE_DELETION`
`DescribeActiveReceiptRuleSet`	`RESOURCE_READ`
`GetConfigurationSet`	`RESOURCE_READ`
`GetConfigurationSetEventDestinations`	`RESOURCE_READ`
`GetContactList`	`RESOURCE_READ`
`GetDedicatedIps`	`RESOURCE_READ`
`GetEmailIdentity`	`RESOURCE_READ`
`GetEmailIdentityPolicies`	`RESOURCE_READ`
`GetIdentityDkimAttributes`	`RESOURCE_READ`
`GetIdentityNotificationAttributes`	`RESOURCE_READ`
`GetIdentityVerificationAttributes`	`RESOURCE_READ`
`GetSendQuota`	`RESOURCE_READ`
`GetSendStatistics`	`RESOURCE_READ`
`GetSuppressedDestination`	`RESOURCE_READ`
`ListConfigurationSets`	`RESOURCE_READ`
`ListContactLists`	`RESOURCE_READ`
`ListDedicatedIpPools`	`RESOURCE_READ`
`ListEmailIdentities`	`RESOURCE_READ`
`ListEmailTemplates`	`RESOURCE_READ`
`ListIdentities`	`RESOURCE_READ`
`ListReceiptRuleSets`	`RESOURCE_READ`
`ListSuppressedDestinations`	`RESOURCE_READ`
`ListVerifiedEmailAddresses`	`RESOURCE_READ`
`PutEmailIdentityDkimAttributes`	`RESOURCE_WRITTEN`
`PutEmailIdentityMailFromAttributes`	`RESOURCE_WRITTEN`
`UpdateTemplate`	`RESOURCE_WRITTEN`
`AssumeRole`	`RESOURCE_READ`
`AssumeRoleWithSAML`	`RESOURCE_READ`
`AssumeRoleWithWebIdentity`	`RESOURCE_READ`
`GetCallerIdentity`	`RESOURCE_READ`
`GetFederationToken`	`RESOURCE_READ`
`GetSessionToken`	`RESOURCE_READ`
`GetWebACLForResource`	`RESOURCE_READ`
`ListRuleGroups`	`RESOURCE_READ`
`ListRules`	`RESOURCE_READ`
`GetByteMatchSet`	`RESOURCE_READ`
`GetRule`	`RESOURCE_READ`
`GetRuleGroup`	`RESOURCE_READ`
`GetSampledRequests`	`RESOURCE_READ`
`GetXssMatchSet`	`RESOURCE_READ`
`CheckCapacity`	`RESOURCE_READ`
`CreateIPSet`	`RESOURCE_CREATION`
`CreateWebACL`	`RESOURCE_CREATION`
`DeleteWebACL`	`RESOURCE_DELETION`
`DescribeManagedRuleGroup`	`RESOURCE_READ`
`DisassociateWebACL`	`RESOURCE_PERMISSIONS_CHANGE`
`GetIPSet`	`RESOURCE_READ`
`GetLoggingConfiguration`	`RESOURCE_READ`
`GetWebACL`	`RESOURCE_READ`
`ListAvailableManagedRuleGroupVersions`	`RESOURCE_READ`
`ListMobileSdkReleases`	`RESOURCE_READ`
`ListRegexPatternSets`	`RESOURCE_READ`
`ListResourcesForWebACL`	`RESOURCE_READ`
`ListWebACLs`	`RESOURCE_READ`
`UpdateIPSet`	`RESOURCE_WRITTEN`
`UpdateWebACL`	`RESOURCE_WRITTEN`
`PutDashboard`	`RESOURCE_CREATION`
`ListDashboards`	`RESOURCE_READ`
`DescribeAlarms`	`RESOURCE_READ`
`CreateDirectory`	`RESOURCE_CREATION`
`DescribeDirectories`	`RESOURCE_READ`
`UpdateInstanceInformation`	`RESOURCE_WRITTEN`
`StartSession`	`STATUS_STARTUP`
`GetConnectionStatus`	`RESOURCE_READ`
`ListDocuments`	`RESOURCE_READ`
`DescribeMetricFilters`	`RESOURCE_READ`
`ConsoleLogin`	`USER_LOGIN`

Field mapping reference: AWS CloudTrail - Common Fields

The following table lists common fields for the AWS Cloudtrail log and their corresponding UDM fields.

Log field	UDM mapping	Logic
	`metadata.product_name`	The `metadata.product_name` UDM field is set to `AWS CloudTrail`.
	`metadata.vendor_name`	The `metadata.vendor_name` UDM field is set to `AMAZON`.
`Records.additionalEventData.aclRequired`	`target.resource.attribute.labels[req_acl_required]`
`Records.additionalEventData.ARN`	`target.resource.attribute.labels[req_ARN]`
`Records.additionalEventData.AuthenticationMethod`	`target.resource.attribute.labels[req_authentication_method]`
`Records.additionalEventData.bytesTransferredIn`	`network.received_bytes`	If the raw log field `Records.additionalEventData.bytesTransferredIn` value is an integer then the value of `Records.additionalEventData.bytesTransferredIn` is mapped with `network.received_bytes` else the value of `Records.additionalEventData.bytesTransferredIn` is mapped with `target.resource.attribute.labels[req_bytes_transferred_in]`
`Records.additionalEventData.bytesTransferredOut`	`network.sent_bytes`	If the raw log field `Records.additionalEventData.bytesTransferredOut` value is an integer then the value of `Records.additionalEventData.bytesTransferredOut` is mapped with `network.sent_bytes` else the value of `Records.additionalEventData.bytesTransferredOut` is mapped with `target.resource.attribute.labels[req_bytes_transferred_out]`
`Records.additionalEventData.CipherSuite`	`target.resource.attribute.labels[req_cipher_suite]`
`Records.additionalEventData.configRuleArn`	`target.resource.attribute.labels[req_config_rule_arn]`
`Records.additionalEventData.configRuleName`	`target.resource.attribute.labels[req_config_rule_name]`
`Records.additionalEventData.configRuleInputParameters`	`target.resource.attribute.labels[req_config_rule_input_parameters]`
`Records.additionalEventData.functionVersion`	`target.resource.attribute.labels[req_function_version]`
`Records.additionalEventData.grantId`	`target.resource.attribute.labels[req_grant_id]`
`Records.additionalEventData.managedRuleIdentifier`	`target.resource.attribute.labels[req_managed_rule_identifier]`
`Records.additionalEventData.Name`	`target.resource.attribute.labels[req_name]`
`Records.additionalEventData.Note`	`target.resource.attribute.labels[req_note]`
`Records.additionalEventData.notificationJobType`	`target.resource.attribute.labels[req_notification_job_type]`
`Records.additionalEventData.SecretId`	`target.resource.attribute.labels[req_secretId]`
`Records.additionalEventData.service`	`additional.fields[service]`
`Records.additionalEventData.signatureStatus`	`target.resource.attribute.labels[req_signature_status]`
`Records.additionalEventData.SignatureVersion`	`target.resource.attribute.labels[req_signature_version]`
`Records.additionalEventData.SSEApplied`	`target.resource.attribute.labels[req_sse_applied]`
`Records.additionalEventData.value`	`target.resource.attribute.labels[req_value]`
`Records.additionalEventData.x-amz-id-2`	`target.resource.attribute.labels[req_x-amz-id-2]`
`Records.additionalEventData.MFAUsed`	`extensions.auth.auth_details`
`Records.apiVersion`	`additional.fields[api_version]`
`Records.awsRegion`	`target.location.name`
`Records.errorCode`	`security_result.summary`
`Records.errorMessage`	`security_result.description`
`Records.eventCategory`	`security_result.category_details`
`Records.eventID`	`metadata.product_log_id`
`Records.eventName`	`metadata.product_event_type`	If the `Records.eventType` log field value is equal to `AwsCloudTrailInsight` then, `Records.insightDetails.eventName` log field is mapped to the `metadata.product_event_type` UDM field. Else, `Records.eventName` log field is mapped to the `metadata.product_event_type` UDM field.
`Records.insightDetails.eventName`	`metadata.product_event_type`	If the `Records.eventType` log field value is equal to `AwsCloudTrailInsight` then, `Records.insightDetails.eventName` log field is mapped to the `metadata.product_event_type` UDM field. Else, `Records.eventName` log field is mapped to the `metadata.product_event_type` UDM field.
`Records.eventSource`	`target.application`	If the `Records.eventType` log field value is equal to `AwsCloudTrailInsight` then, `Records.insightDetails.eventSource` log field is mapped to the `target.application` UDM field. Else, `Records.eventSource` log field is mapped to the `target.application` UDM field.
`Records.insightDetails.eventSource`	`target.application`	If the `Records.eventType` log field value is equal to `AwsCloudTrailInsight` then, `Records.insightDetails.eventSource` log field is mapped to the `target.application` UDM field. Else, `Records.eventSource` log field is mapped to the `target.application` UDM field.
`Records.eventTime`	`metadata.event_timestamp`
`Records.eventType`	`additional.fields[event_type]`
`Records.eventVersion`	`metadata.product_version`
`Records.managementEvent`	`additional.fields[management_event]`
`Records.readOnly`	`additional.fields[read_only]`
`Records.recipientAccountId`	`target.resource_ancestors.product_object_id`	`Records.recipientAccountId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. If the `Records.recipientAccountId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.recipientAccountId`	`additiona.fields[recipientAccountId]`
`Record.userIdentity.accessKeyId`	`additional.fields[accessKeyId]`
`Records.requestID`	`additional.fields[request_id]`
`Records.resources.accountId`	`about.resource.product_object_id`	Iterate through log field `Records.resources`, then `Records.resources.accountId` log field is mapped to the `about.resource.product_object_id` UDM field.
	`about.resource.resource_type`	Iterate through log field `Records.resources`, then If the `Records.resources.accountId` log field value is not empty then, the `about.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT`.
	`about.resource.attribute.cloud.environment`	Iterate through log field `Records.resources`, then If the `Records.resources.accountId` log field value is not empty then, the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.resources.ARN`	`about.resource.name`	Iterate through log field `Records.resources`, then `Records.resources.ARN` log field is mapped to the `about.resource.name` UDM field.
`Records.resources.ARNPrefix`	`about.resource.attribute.labels[arn_prefix]`	Iterate through log field `Records.resources`, then the `about.resource.attribute.labels.key` UDM field is set to `arn_prefix` and `Records.resources.ARNPrefix` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.resources.type`	`about.resource.resource_subtype`	Iterate through log field `Records.resources`, then `Records.resources.type` log field is mapped to the `about.resource.resource_subtype` UDM field.
`Records.responseElements.tagList.key`	`target.resource.attribute.labels`	Iterate through log field `Records.requestParameters.tagList`, then `Records.responseElements.tagList.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.tagList.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.tagList.value`	`target.resource.attribute.labels`	Iterate through log field `Records.requestParameters.tagList`, then `Records.responseElements.tagList.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.tagList.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.sessionCredentialFromConsole`	`additional.fields[session_credential_from_console]`
`Records.sharedEventID`	`additional.fields[shared_event_id]`
`Records.sourceIPAddress`	`principal.ip`
`Records.tlsDetails.cipherSuite`	`network.tls.cipher`
`Records.tlsDetails.clientProvidedHostHeader`	`network.tls.client.server_name`
`Records.tlsDetails.tlsVersion`	`network.tls.version`
`Records.userAgent`	`network.http.user_agent`
`Records.userIdentity.accessKeyId`	`principal.user.attribute.labels[access_key_id]`	if the `Records.eventName` log field value contain one of the following values `ConsoleLogin` `UserAuthentication` then, the `Records.userIdentity.accessKeyId` log field is mapped to the `target.user.attribute.labels[access_key_id]` UDM Field. Else, `Records.userIdentity.accessKeyId` log field is mapped to the `principal.user.attribute.labels[access_key_id]` UDM field.
`Records.userIdentity.arn`	`principal.user.userid`	if the `Records.eventName` log field value contain one of the following values `ConsoleLogin` `UserAuthentication` then, the `Records.userIdentity.arn` log field is mapped to the `target.user.userid` UDM Field. Else, `Records.userIdentity.arn` log field is mapped to the `principal.user.userid` UDM field.
`Records.userIdentity.accountId`	`principal.resource.product_object_id`	if the `Records.eventName` log field value contain one of the following values `ConsoleLogin` `UserAuthentication` then, the `Records.userIdentity.accountId` log field is mapped to the `target.resource.product_object_id` UDM Field. Else, `Records.userIdentity.accountId` log field is mapped to the `principal.resource.product_object_id` UDM field.
`Records.userIdentity.arn`	`principal.resource.name`	`Records.userIdentity.arn` log field is mapped to the `principal.resource.name` UDM field. If the `Records.userIdentity.arn` log field value is not empty and if the `Records.eventName` log field value contain one of the following values `createResource` `createRestApi` then, the `principal.resource.resource_type` UDM field is set to `CLOUD_ORGANIZATION`.
`Records.userIdentity.identityProvider`	`principal.application`
`Records.userIdentity.invokedBy`	`principal.user.attribute.labels[invoked_by]`	if the `Records.eventName` log field value contain one of the following values `ConsoleLogin` `UserAuthentication` then, the `Records.userIdentity.invokedBy` log field is mapped to the `target.user.attribute.labels[invoked_by]` UDM Field. Else, `Records.userIdentity.invokedBy` log field is mapped to the `principal.user.attribute.labels[invoked_by]` UDM field.
`Records.userIdentity.principalId`	`principal.user.product_object_id`	if the `Records.eventName` log field value contain one of the following values `ConsoleLogin` `UserAuthentication` then, the `Records.userIdentity.principalId` log field is mapped to the `target.user.product_object_id` UDM Field. Else, `Records.userIdentity.principalId` log field is mapped to the `principal.user.product_object_id` UDM field.
`Records.userIdentity.sessionContext.attributes.creationDate`	`principal.user.attribute.creation_time`	if the `Records.eventName` log field value contain one of the following values `ConsoleLogin` `UserAuthentication` then, the `Records.userIdentity.sessionContext.attributes.creationDate` log field is mapped to the `target.user.attribute.creation_time` UDM Field. Else, `Records.userIdentity.sessionContext.attributes.creationDate` log field is mapped to the `principal.user.attribute.creation_time` UDM field.
`Records.userIdentity.sessionContext.attributes.mfaAuthenticated`	`principal.user.attribute.labels[mfa_authenticated]`	if the `Records.eventName` log field value contain one of the following values `ConsoleLogin` `UserAuthentication` then, the `Records.userIdentity.sessionContext.attributes.mfaAuthenticated` log field is mapped to the `target.user.attribute.labels[mfa_authenticated]` UDM Field. Else, `Records.userIdentity.sessionContext.attributes.mfaAuthenticated` log field is mapped to the `principal.user.attribute.labels[mfa_authenticated]` UDM field.
`Records.userIdentity.sessionContext.ec2RoleDelivery`	`principal.user.attribute.labels[ec2_role_delivery]`	if the `Records.eventName` log field value contain one of the following values `ConsoleLogin` `UserAuthentication` then, the `Records.userIdentity.sessionContext.ec2RoleDelivery` log field is mapped to the `target.user.attribute.labels[ec2_role_delivery]` UDM Field. Else, `Records.userIdentity.sessionContext.ec2RoleDelivery` log field is mapped to the `principal.user.attribute.labels[ec2_role_delivery]` UDM field.
`Records.userIdentity.sessionContext.sessionIssuer.accountId`	`principal.user.attribute.labels[session_issuer_account_id]`	if the `Records.eventName` log field value contain one of the following values `ConsoleLogin` `UserAuthentication` then, the `Records.userIdentity.sessionContext.sessionIssuer.accountId` log field is mapped to the `target.user.attribute.labels[session_issuer_account_id]` UDM Field. Else, `Records.userIdentity.sessionContext.sessionIssuer.accountId` log field is mapped to the `principal.user.attribute.labels[session_issuer_account_id]` UDM field.
`Records.userIdentity.sessionContext.sessionIssuer.arn`	`principal.user.attribute.labels[session_issuer_arn]`	if the `Records.eventName` log field value contain one of the following values `ConsoleLogin` `UserAuthentication` then, the `Records.userIdentity.sessionContext.sessionIssuer.arn` log field is mapped to the `target.user.attribute.labels[session_issuer_arn]` UDM Field. Else, `Records.userIdentity.sessionContext.sessionIssuer.arn` log field is mapped to the `principal.user.attribute.labels[session_issuer_arn]` UDM field.
`Records.userIdentity.sessionContext.sessionIssuer.principalId`	`principal.user.attribute.labels[session_issuer_principal_id]`	if the `Records.eventName` log field value contain one of the following values `ConsoleLogin` `UserAuthentication` then, the `Records.userIdentity.sessionContext.sessionIssuer.principalId` log field is mapped to the `target.user.attribute.labels[session_issuer_principal_id]` UDM Field. Else, `Records.userIdentity.sessionContext.sessionIssuer.principalId` log field is mapped to the `principal.user.attribute.labels[session_issuer_principal_id]` UDM field.
`Records.userIdentity.sessionContext.sessionIssuer.type`	`principal.user.attribute.labels[session_issuer_type]`	if the `Records.eventName` log field value contain one of the following values `ConsoleLogin` `UserAuthentication` then, the `Records.userIdentity.sessionContext.sessionIssuer.type` log field is mapped to the `target.user.attribute.labels[session_issuer_type]` UDM Field. Else, `Records.userIdentity.sessionContext.sessionIssuer.type` log field is mapped to the `principal.user.attribute.labels[session_issuer_type]` UDM field.
`Records.userIdentity.sessionContext.sessionIssuer.userName`	`principal.user.attribute.labels[session_issuer_user_name]`	if the `Records.eventName` log field value contain one of the following values `ConsoleLogin` `UserAuthentication` then, the `Records.userIdentity.sessionContext.sessionIssuer.userName` log field is mapped to the `target.user.attribute.labels[session_issuer_user_name]` UDM Field. Else, `Records.userIdentity.sessionContext.sessionIssuer.userName` log field is mapped to the `principal.user.attribute.labels[session_issuer_user_name]` UDM field.
`Records.userIdentity.sessionContext.webIdFederationData.federatedProvider`	`principal.user.attribute.labels[session_context_federated_provider]`	if the `Records.eventName` log field value contain one of the following values `ConsoleLogin` `UserAuthentication` then, the `Records.userIdentity.sessionContext.webIdFederationData.federatedProvider` log field is mapped to the `target.user.attribute.labels[session_context_federated_provider]` UDM Field. Else, `Records.userIdentity.sessionContext.webIdFederationData.federatedProvider` log field is mapped to the `principal.user.attribute.labels[session_context_federated_provider]` UDM field.
`Records.userIdentity.type`	`principal.user.attribute.roles.name`	if the `Records.eventName` log field value contain one of the following values `ConsoleLogin` `UserAuthentication` then, the `Records.userIdentity.type` log field is mapped to the `target.user.attribute.roles.name` UDM Field. Else, `Records.userIdentity.type` log field is mapped to the `principal.user.attribute.roles.name` UDM field.
`Records.userIdentity.userName`	`principal.user.user_display_name`	if the `Records.eventName` log field value contain one of the following values `ConsoleLogin` `UserAuthentication` then, the `Records.userIdentity.userName` log field is mapped to the `target.user.user_display_name` UDM Field. Else, `Records.userIdentity.userName` log field is mapped to the `principal.user.user_display_name` UDM field.
`Records.vpcEndpointId`	`target.resource_ancestors.product_object_id`	`Records.vpcEndpointId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. If the `Records.vpcEndpointId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.insightDetails.state`	`security_result.detection_fields[insight_details_state]`
`Records.insightDetails.insightType`	`security_result.rule_type`
`Records.insightDetails.insightContext.statistics.baseline.average`	`security_result.detection_fields[insight_context_statistics_baseline_average]`
`Records.insightDetails.insightContext.statistics.insight.average`	`security_result.detection_fields[insight_context_statistics_insight_average]`
`Records.insightDetails.insightContext.statistics.insightDuration`	`security_result.detection_fields[insight_context_statistics_insight_duration]`
`Records.insightDetails.insightContext.statistics.baselineDuration`	`security_result.detection_fields[insight_context_statistics_baseline_duration]`
`Records.insightDetails.insightContext.attributions.insight.value`	`security_result.detection_fields[insight_context_attributions_insight_value]`	Iterate through log field `Records.insightDetails.insightContext.attributions`, then Iterate through log field `Records.insightDetails.insightContext.attributions.baseline`, then the `security_result.detection_fields.key` UDM field is set to `insight_context_attributions_insight_value` and `Records.insightDetails.insightContext.attributions.insight.value` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.insightDetails.insightContext.attributions.insight.average`	`security_result.detection_fields[insight_context_attributions_insight_average]`	Iterate through log field `Records.insightDetails.insightContext.attributions`, then Iterate through log field `Records.insightDetails.insightContext.attributions.baseline`, then the `security_result.detection_fields.key` UDM field is set to `insight_context_attributions_insight_average` and `Records.insightDetails.insightContext.attributions.insight.average` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.insightDetails.insightContext.attributions.baseline.vlaue`	`security_result.detection_fields[insight_context_attributions_baseline_value]`	Iterate through log field `Records.insightDetails.insightContext.attributions`, then Iterate through log field `Records.insightDetails.insightContext.attributions.baseline`, then the `security_result.detection_fields.key` UDM field is set to `insight_context_attributions_baseline_vlaue` and `Records.insightDetails.insightContext.attributions.baseline.vlaue` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.insightDetails.insightContext.attributions.baseline.average`	`security_result.detection_fields[insight_context_attributions_baseline_average]`	Iterate through log field `Records.insightDetails.insightContext.attributions`, then Iterate through log field `Records.insightDetails.insightContext.attributions.baseline`, then the `security_result.detection_fields.key` UDM field is set to `insight_context_attributions_baseline_average` and `Records.insightDetails.insightContext.attributions.baseline.average` log field is mapped to the `security_result.detection_fields.value` UDM field.
	`metadata.event_type`	The `metadata.event_type` UDM field is set to `GENERIC_EVENT`.

Field mapping reference: AWS CloudTrail - Resource Explorer

The following table lists the log fields for the Resource Explorer log type and their corresponding UDM fields.

Log field	UDM mapping	Logic
`Records.requestParameters.ViewArn`	`target.resource.name`
`Records.requestParameters.Type`	`target.resource.attribute.labels[type]`
`Records.requestParameters.MaxResults`	`target.resource.attribute.labels[max_results]`
`Records.requestParameters.QueryString`	`target.resource.attribute.labels[query_string]`

Field mapping reference: AWS CloudTrail - Resource Groups

The following table lists the log fields for the Resource Groups log type and their corresponding UDM fields.

Log field	UDM mapping	Logic
`Records.responseElements.Group.OwnerId`	`target.resource.attribute.labels[owner_id]`
`Records.responseElements.ResourceQuery.Type`	`target.resource.attribute.labels[resource_query_type]`
`Records.responseElements.GroupQuery.ResourceQuery.Type`	`target.resource.attribute.labels[resource_query_type]`
`Records.responseElements.ResourceQuery.Query`	`target.resource.attribute.labels[resource_query_query]`
`Records.responseElements.GroupQuery.ResourceQuery.Query`	`target.resource.attribute.labels[resource_query_query]`
`Records.responseElements.Group.GroupArn`	`target.resource.name`
`Records.requestParameters.Group`	`target.resource.name`
`Records.requestParameters.Arn`	`target.resource.name`
`Records.responseElements.Group.Name`	`target.resource.attribute.labels[group_name]`
`Records.requestParameters.GroupName`	`target.resource.attribute.labels[group_name]`
`Records.responseElements.GroupQuery.GroupName`	`target.resource.attribute.labels[group_name]`
`Records.responseElements.Group.Description`	`target.resource.attribute.labels[group_description]`
`Records.requestParameters.NextToken`	`target.resource.attribute.labels[next_token]`
`Records.requestParameters.nextToken`	`target.resource.attribute.labels[next_token]`
`Records.requestParameters.Filters.Values`	`target.resource.attribute.labels`	Iterate through log field `Records.requestParameters.Filters`, then Iterate through log field `Records.requestParameters.Filters.Values`, then `Records.requestParameters.Filters.Name` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.Filters.Values` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.Filters.Name`	`target.resource.attribute.labels`	Iterate through log field `Records.requestParameters.Filters`, then Iterate through log field `Records.requestParameters.Filters.Values`, then `Records.requestParameters.Filters.Name` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.Filters.Values` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.MaxResults`	`target.resource.attribute.labels[max_results]`
`Records.requestParameters.QueryType`	`target.resource.attribute.labels[query_type]`

Field mapping reference: AWS CloudTrail - Elastic Kubernetes Service

The following table lists the log fields for the Elastic Kubernetes Service log type and their corresponding UDM fields.

Log field	UDM mapping	Logic
`Records.responseElements.addon.modifiedAt`	`target.resource.attribute.last_update_time`	Iterate through log field `Records.responseElements.insights`, then If the `index` value is equal to `0` then, `Records.responseElements.insights.lastTransitionTime` log field is mapped to the `target.resource.attribute.last_update_time` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `last_transition_time` and `Records.responseElements.insights.lastTransitionTime` log field is mapped to the `target.resource.attribute.labels.value` UDM field.`Records.responseElements.addon.modifiedAt` log field is mapped to the `target.resource.attribute.last_update_time` UDM field and `Records.responseElements.nodegroup.modifiedAt` log field is mapped to the `target.resource.attribute.last_update_time` UDM field.
`Records.responseElements.nodegroup.modifiedAt`	`target.resource.attribute.last_update_time`	Iterate through log field `Records.responseElements.insights`, then If the `index` value is equal to `0` then, `Records.responseElements.insights.lastTransitionTime` log field is mapped to the `target.resource.attribute.last_update_time` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `last_transition_time` and `Records.responseElements.insights.lastTransitionTime` log field is mapped to the `target.resource.attribute.labels.value` UDM field.`Records.responseElements.addon.modifiedAt` log field is mapped to the `target.resource.attribute.last_update_time` UDM field and `Records.responseElements.nodegroup.modifiedAt` log field is mapped to the `target.resource.attribute.last_update_time` UDM field.
`Records.responseElements.insights.lastTransitionTime`	`target.resource.attribute.last_update_time`	Iterate through log field `Records.responseElements.insights`, then If the `index` value is equal to `0` then, `Records.responseElements.insights.lastTransitionTime` log field is mapped to the `target.resource.attribute.last_update_time` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `last_transition_time` and `Records.responseElements.insights.lastTransitionTime` log field is mapped to the `target.resource.attribute.labels.value` UDM field.`Records.responseElements.addon.modifiedAt` log field is mapped to the `target.resource.attribute.last_update_time` UDM field and `Records.responseElements.nodegroup.modifiedAt` log field is mapped to the `target.resource.attribute.last_update_time` UDM field.
`Records.responseElements.addon.clusterName`	`target.resource.attribute.labels[cluster_name]`
`Records.responseElements.cluster.name`	`target.resource.attribute.labels[cluster_name]`
`Records.responseElements.fargateProfile.clusterName`	`target.resource.attribute.labels[cluster_name]`
`Records.responseElements.nodegroup.clusterName`	`target.resource.attribute.labels[cluster_name]`
`Records.responseElements.clusterName`	`target.resource.attribute.labels[cluster_name]`
`Records.responseElements.addon.createdAt`	`target.resource.attribute.creation_time`
`Records.responseElements.cluster.createdAt`	`target.resource.attribute.creation_time`
`Records.responseElements.fargateProfile.createdAt`	`target.resource.attribute.creation_time`
`Records.responseElements.nodegroup.createdAt`	`target.resource.attribute.creation_time`
`Records.responseElements.update.createdAt`	`target.resource.attribute.creation_time`
`Records.responseElements.addon.addonVersion`	`target.resource.attribute.labels[addon_version]`
`Records.requestParameters.addonVersion`	`target.resource.attribute.labels[addon_version]`
`Records.responseElements.addon.addonName`	`target.resource.name`	Iterate through log field `Records.responseElements.insights`, then If the `index` value is equal to `0` then, `Records.responseElements.insights.name` log field is mapped to the `target.resource.name` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `resource_name` and `Records.responseElements.insights.name` log field is mapped to the `target.resource.attribute.labels.value` UDM field.`Records.responseElements.addon.addonName` log field is mapped to the `target.resource.name` UDM field and `Records.responseElements.fargateProfile.fargateProfileName` log field is mapped to the `target.resource.name` UDM field and `Records.responseElements.nodegroup.nodegroupName` log field is mapped to the `target.resource.name` UDM field and `Records.requestParameters.addonName` log field is mapped to the `target.resource.name` UDM field and `Records.responseElements.addonName` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.fargateProfile.fargateProfileName`	`target.resource.name`	Iterate through log field `Records.responseElements.insights`, then If the `index` value is equal to `0` then, `Records.responseElements.insights.name` log field is mapped to the `target.resource.name` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `resource_name` and `Records.responseElements.insights.name` log field is mapped to the `target.resource.attribute.labels.value` UDM field.`Records.responseElements.addon.addonName` log field is mapped to the `target.resource.name` UDM field and `Records.responseElements.fargateProfile.fargateProfileName` log field is mapped to the `target.resource.name` UDM field and `Records.responseElements.nodegroup.nodegroupName` log field is mapped to the `target.resource.name` UDM field and `Records.requestParameters.addonName` log field is mapped to the `target.resource.name` UDM field and `Records.responseElements.addonName` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.nodegroup.nodegroupName`	`target.resource.name`	Iterate through log field `Records.responseElements.insights`, then If the `index` value is equal to `0` then, `Records.responseElements.insights.name` log field is mapped to the `target.resource.name` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `resource_name` and `Records.responseElements.insights.name` log field is mapped to the `target.resource.attribute.labels.value` UDM field.`Records.responseElements.addon.addonName` log field is mapped to the `target.resource.name` UDM field and `Records.responseElements.fargateProfile.fargateProfileName` log field is mapped to the `target.resource.name` UDM field and `Records.responseElements.nodegroup.nodegroupName` log field is mapped to the `target.resource.name` UDM field and `Records.requestParameters.addonName` log field is mapped to the `target.resource.name` UDM field and `Records.responseElements.addonName` log field is mapped to the `target.resource.name` UDM field.
`Records.requestParameters.addonName`	`target.resource.name`	Iterate through log field `Records.responseElements.insights`, then If the `index` value is equal to `0` then, `Records.responseElements.insights.name` log field is mapped to the `target.resource.name` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `resource_name` and `Records.responseElements.insights.name` log field is mapped to the `target.resource.attribute.labels.value` UDM field.`Records.responseElements.addon.addonName` log field is mapped to the `target.resource.name` UDM field and `Records.responseElements.fargateProfile.fargateProfileName` log field is mapped to the `target.resource.name` UDM field and `Records.responseElements.nodegroup.nodegroupName` log field is mapped to the `target.resource.name` UDM field and `Records.requestParameters.addonName` log field is mapped to the `target.resource.name` UDM field and `Records.responseElements.addonName` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.insights.name`	`target.resource.name`	Iterate through log field `Records.responseElements.insights`, then If the `index` value is equal to `0` then, `Records.responseElements.insights.name` log field is mapped to the `target.resource.name` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `resource_name` and `Records.responseElements.insights.name` log field is mapped to the `target.resource.attribute.labels.value` UDM field.`Records.responseElements.addon.addonName` log field is mapped to the `target.resource.name` UDM field and `Records.responseElements.fargateProfile.fargateProfileName` log field is mapped to the `target.resource.name` UDM field and `Records.responseElements.nodegroup.nodegroupName` log field is mapped to the `target.resource.name` UDM field and `Records.requestParameters.addonName` log field is mapped to the `target.resource.name` UDM field and `Records.responseElements.addonName` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.addonName`	`target.resource.name`	Iterate through log field `Records.responseElements.insights`, then If the `index` value is equal to `0` then, `Records.responseElements.insights.name` log field is mapped to the `target.resource.name` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `resource_name` and `Records.responseElements.insights.name` log field is mapped to the `target.resource.attribute.labels.value` UDM field.`Records.responseElements.addon.addonName` log field is mapped to the `target.resource.name` UDM field and `Records.responseElements.fargateProfile.fargateProfileName` log field is mapped to the `target.resource.name` UDM field and `Records.responseElements.nodegroup.nodegroupName` log field is mapped to the `target.resource.name` UDM field and `Records.requestParameters.addonName` log field is mapped to the `target.resource.name` UDM field and `Records.responseElements.addonName` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.addon.addonArn`	`target.resource.attribute.labels[addob_arn]`
`Records.responseElements.addon.status`	`target.resource.attribute.labels[addon_status]`
`Records.requestParameters.name`	`target.resource.attribute.labels[name]`
`Records.requestParameters.clientRequestToken`	`target.resource.attribute.labels[client_request_token]`
`Records.requestParameters.resolveConflicts`	`target.resource.attribute.labels[resolve_conflicts]`
`Records.responseElements.cluster.kubernetesNetworkConfig.ipFamily`	`target.resource.attribute.labels[ip_family]`
`Records.responseElements.cluster.resourcesVpcConfig.vpcId`	`target.resource.attribute.labels[vpc_id]`
`Records.responseElements.cluster.logging.clusterLogging.enabled`	`target.resource.attribute.labels[cluster_logging_enabled]`
`Records.responseElements.cluster.roleArn`	`target.resource.attribute.labels[cluster_role_arn]`
`Records.responseElements.cluster.arn`	`target.resource.attribute.labels[cluster_arn]`
`Records.responseElements.cluster.resourcesVpcConfig.subnetIds`	`target.resource.attribute.labels[subnetIds]`	Iterate through log field `Records.responseElements.cluster.resourcesVpcConfig.subnetIds`, then the `target.resource.attribute.labels.key` UDM field is set to `sub_net_ids` and `Records.responseElements.cluster.resourcesVpcConfig.subnetIds` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.cluster.accessConfig.bootstrapClusterCreatorAdminPermissions`	`target.resource.attribute.labels[bootstrap_cluster_creator_admin_permissions]`
`Records.responseElements.cluster.resourcesVpcConfig.endpointPublicAccess`	`target.resource.attribute.labels[endpoint_public_access]`
`Records.responseElements.cluster.version`	`target.resource.attribute.labels[cluster_version]`
`Records.responseElements.cluster.resourcesVpcConfig.publicAccessCidrs`	`target.resource.attribute.labels[public_access_cidrs]`	Iterate through log field `Records.responseElements.cluster.resourcesVpcConfig.publicAccessCidrs`, then the `target.resource.attribute.labels.key` UDM field is set to `public_access_cidrs` and `Records.responseElements.cluster.resourcesVpcConfig.publicAccessCidrs` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.cluster.logging.clusterLogging.types`	`target.resource.attribute.labels[cluster_logging_types]`	Iterate through log field `Records.responseElements.cluster.logging.clusterLogging`, then Iterate through log field `Records.responseElements.cluster.logging.clusterLogging.types`, then the `target.resource.attribute.labels.key` UDM field is set to `cluster_logging_types` and `Records.responseElements.cluster.logging.clusterLogging.types` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.cluster.resourcesVpcConfig.securityGroupIds`	`target.resource.attribute.labels[security_group_ids]`	Iterate through log field `Records.responseElements.cluster.resourcesVpcConfig.securityGroupIds`, then the `target.resource.attribute.labels.key` UDM field is set to `security_group_ids` and `Records.responseElements.cluster.resourcesVpcConfig.securityGroupIds` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.cluster.resourcesVpcConfig.endpointPrivateAccess`	`target.resource.attribute.labels[endpointPrivateAccess]`
`Records.responseElements.cluster.platformVersion`	`target.platform_version`
`Records.responseElements.cluster.accessConfig.authenticationMode`	`target.resource.attribute.labels[authentication_mode]`
`Records.requestParameters.accessConfig.authenticationMode`	`target.resource.attribute.labels[authentication_mode]`
`Records.responseElements.cluster.status`	`target.resource.attribute.labels[cluster_status]`
`Records.responseElements.cluster.kubernetesNetworkConfig.serviceIpv4Cidr`	`target.resource.attribute.labels[service_ipv4_cidr]`
`Records.requestParameters.k8sapi`	`target.resource.attribute.labels[k8sapi]`
`Records.requestParameters.fieldSelector`	`target.resource.attribute.labels[field_selector]`
`Records.requestParameters.continue`	`target.resource.attribute.labels[continue]`
`Records.responseElements.fargateProfile.podExecutionRoleArn`	`target.resource.attribute.labels[pod_execution_role_arn]`
`Records.responseElements.fargateProfile.fargateProfileArn`	`target.resource.attribute.labels[fargate_profile_arn]`
`Records.responseElements.fargateProfile.subnets`	`target.resource.attribute.labels[subnets]`	Iterate through log field `Records.responseElements.nodegroup.subnets`, then the `target.resource.attribute.labels.key` UDM field is set to `subnets` and `Records.responseElements.nodegroup.subnets` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Iterate through log field `Records.responseElements.fargateProfile.subnets`, then the `target.resource.attribute.labels.key` UDM field is set to `subnets` and `Records.responseElements.fargateProfile.subnets` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.nodegroup.subnets`	`target.resource.attribute.labels[subnets]`	Iterate through log field `Records.responseElements.nodegroup.subnets`, then the `target.resource.attribute.labels.key` UDM field is set to `subnets` and `Records.responseElements.nodegroup.subnets` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Iterate through log field `Records.responseElements.fargateProfile.subnets`, then the `target.resource.attribute.labels.key` UDM field is set to `subnets` and `Records.responseElements.fargateProfile.subnets` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.fargateProfile.status`	`target.resource.attribute.labels[fargate_profile_status]`
`Records.responseElements.fargateProfile.selectors.namespace`	`target.resource.attribute.labels[namespace]`	Iterate through log field `Records.responseElements.fargateProfile.selectors`, then the `target.resource.attribute.labels.key` UDM field is set to `namespace` and `Records.responseElements.fargateProfile.selectors.namespace` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.nodegroup.updateConfig.maxUnavailable`	`target.resource.attribute.labels[max_unavailable]`
`Records.responseElements.nodegroup.launchTemplate.version`	`target.resource.attribute.labels[launch_template_version]`
`Records.responseElements.nodegroup.status`	`target.resource.attribute.labels[status]`	Iterate through log field `Records.responseElements.insights`, then the `target.resource.attribute.labels.key` UDM field is set to `status` and `Records.responseElements.insights.insightStatus.status` log field is mapped to the `target.resource.attribute.labels.value` UDM field.The `target.resource.attribute.labels.key` UDM field is set to `status` and `Records.responseElements.nodegroup.status` log field is mapped to the `target.resource.attribute.labels.value` UDM field and the `target.resource.attribute.labels.key` UDM field is set to `status` and `Records.responseElements.update.status` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.insights.insightStatus.status`	`target.resource.attribute.labels[status]`	Iterate through log field `Records.responseElements.insights`, then the `target.resource.attribute.labels.key` UDM field is set to `status` and `Records.responseElements.insights.insightStatus.status` log field is mapped to the `target.resource.attribute.labels.value` UDM field.The `target.resource.attribute.labels.key` UDM field is set to `status` and `Records.responseElements.nodegroup.status` log field is mapped to the `target.resource.attribute.labels.value` UDM field and the `target.resource.attribute.labels.key` UDM field is set to `status` and `Records.responseElements.update.status` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.update.status`	`target.resource.attribute.labels[status]`	Iterate through log field `Records.responseElements.insights`, then the `target.resource.attribute.labels.key` UDM field is set to `status` and `Records.responseElements.insights.insightStatus.status` log field is mapped to the `target.resource.attribute.labels.value` UDM field.The `target.resource.attribute.labels.key` UDM field is set to `status` and `Records.responseElements.nodegroup.status` log field is mapped to the `target.resource.attribute.labels.value` UDM field and the `target.resource.attribute.labels.key` UDM field is set to `status` and `Records.responseElements.update.status` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.nodegroup.launchTemplate.name`	`target.resource.attribute.labels[launch_template_name]`
`Records.responseElements.nodegroup.scalingConfig.desiredSize`	`target.resource.attribute.labels[desired_size]`
`Records.requestParameters.scalingConfig.desiredSize`	`target.resource.attribute.labels[desired_size]`
`Records.responseElements.nodegroup.scalingConfig.maxSize`	`target.resource.attribute.labels[max_size]`
`Records.requestParameters.scalingConfig.maxSize`	`target.resource.attribute.labels[max_size]`
`Records.responseElements.nodegroup.amiType`	`target.resource.attribute.labels[ami_type]`
`Records.responseElements.nodegroup.nodeRole`	`target.resource.attribute.labels[node_role]`
`Records.responseElements.nodegroup.launchTemplate.id`	`target.resource.attribute.labels[launch_template_id]`
`Records.requestParameters.launchTemplate.id`	`target.resource.attribute.labels[launch_template_id]`
`Records.responseElements.nodegroup.nodegroupArn`	`target.resource.attribute.labels[nodegroup_arn]`
`Records.responseElements.nodegroup.releaseVersion`	`target.resource.attribute.labels[release_version]`
`Records.requestParameters.releaseVersion`	`target.resource.attribute.labels[release_version]`
`Records.responseElements.nodegroup.version`	`target.resource.attribute.labels[version]`
`Records.requestParameters.version`	`target.resource.attribute.labels[version]`
`Records.responseElements.nodegroup.capacityType`	`target.resource.attribute.labels[capacity_type]`
`Records.responseElements.nodegroup.instanceTypes`	`target.resource.attribute.labels[instance_types]`	Iterate through log field `Records.responseElements.nodegroup.instanceTypes`, then the `target.resource.attribute.labels.key` UDM field is set to `instance_types` and `Records.responseElements.nodegroup.instanceTypes` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.nodegroup.scalingConfig.minSize`	`target.resource.attribute.labels[min_size]`
`Records.requestParameters.scalingConfig.minSize`	`target.resource.attribute.labels[min_size]`
`Records.responseElements.nodegroup.diskSize`	`target.resource.attribute.labels[disk_size]`
`Records.responseElements.addon.health.issues.code`	`target.resource.attribute.labels[issues_code]`	Iterate through log field `Records.responseElements.addon.health.issues`, then the `target.resource.attribute.labels.key` UDM field is set to `issues_code` and `Records.responseElements.addon.health.issues.code` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.addon.health.issues.message`	`target.resource.attribute.labels[issues_message]`	Iterate through log field `Records.responseElements.addon.health.issues`, then the `target.resource.attribute.labels.key` UDM field is set to `issues_message` and `Records.responseElements.addon.health.issues.message` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.preserve`	`target.resource.attribute.labels[preserve]`
`Records.responseElements.cluster.identity.oidc.issuer`	`target.resource.attribute.labels[isuser]`
`Records.responseElements.cluster.endpoint`	`target.resource.attribute.labels[endpoint]`
`Records.responseElements.cluster.certificateAuthority.data`	`target.resource.attribute.labels[certificate_authority_data]`
`Records.responseElements.cluster.resourcesVpcConfig.clusterSecurityGroupId`	`target.resource.attribute.labels[cluster_security_group_id]`
`Records.responseElements.message`	`target.resource.attribute.labels[message]`
`Records.responseElements.nodegroup.resources.autoScalingGroups.name`	`target.resource.attribute.labels[auto_scaling_groups_name]`	Iterate through log field `Records.responseElements.nodegroup.resources.autoScalingGroups`, then the `target.resource.attribute.labels.key` UDM field is set to `auto_scaling_groups_name` and `Records.responseElements.nodegroup.resources.autoScalingGroups.name` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.principalArn`	`target.resource.attribute.labels[principal_arn]`
`Records.requestParameters.owners`	`target.resource.attribute.labels[owners]`
`Records.requestParameters.updateId`	`target.resource.attribute.labels[update_id]`
`Records.requestParameters.nodegroupName`	`target.resource.attribute.labels[nodegroup_name]`
`Records.requestParameters.maxResults`	`target.resource.attribute.labels[max_results]`
`Records.requestParameters.nextToken`	`target.resource.attribute.labels[next_token]`
`Records.requestParameters.include`	`target.resource.attribute.labels[include]`
`Records.responseElements.insights.kubernetesVersion`	`target.resource.attribute.labels[kubernetes_version]`	Iterate through log field `Records.responseElements.insights`, then the `target.resource.attribute.labels.key` UDM field is set to `kubernetes_version` and `Records.responseElements.insights.kubernetesVersion` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.insights.category`	`target.resource.attribute.labels[category]`	Iterate through log field `Records.responseElements.insights`, then the `target.resource.attribute.labels.key` UDM field is set to `category` and `Records.responseElements.insights.category` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.insights.description`	`target.resource.attribute.labels[description]`	Iterate through log field `Records.responseElements.insights`, then the `target.resource.attribute.labels.key` UDM field is set to `description` and `Records.responseElements.insights.description` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.insights.id`	`target.resource.product_object_id`	Iterate through log field `Records.responseElements.insights`, then If the `index` value is equal to `0` then, `Records.responseElements.insights.id` log field is mapped to the `target.resource.product_object_id` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `insights_id` and `Records.responseElements.insights.id` log field is mapped to the `target.resource.attribute.labels.value` UDM field.`Records.responseElements.update.id` log field is mapped to the `target.resource.product_object_id` UDM field.
`Records.responseElements.update.id`	`target.resource.product_object_id`	Iterate through log field `Records.responseElements.insights`, then If the `index` value is equal to `0` then, `Records.responseElements.insights.id` log field is mapped to the `target.resource.product_object_id` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `insights_id` and `Records.responseElements.insights.id` log field is mapped to the `target.resource.attribute.labels.value` UDM field.`Records.responseElements.update.id` log field is mapped to the `target.resource.product_object_id` UDM field.
`Records.responseElements.insights.insightStatus.reason`	`target.resource.attribute.labels[reason]`	Iterate through log field `Records.responseElements.insights`, then the `target.resource.attribute.labels.key` UDM field is set to `reason` and `Records.responseElements.insights.insightStatus.reason` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.insights.lastRefreshTime`	`target.resource.attribute.labels[last_refresh_time]`	Iterate through log field `Records.responseElements.insights`, then the `target.resource.attribute.labels.key` UDM field is set to `last_refresh_time` and `Records.responseElements.insights.lastRefreshTime` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.resourceArn`	`target.resource.attribute.labels[resource_arn]`
`Records.responseElements.update.type`	`target.resource.attribute.labels[type]`
`Records.responseElements.update.params.value`	`target.resource.attribute.labels[params]`	Iterate through log field `Records.responseElements.update.params`, then `Records.responseElements.update.params.type` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.update.params.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.update.params.type`	`target.resource.attribute.labels[params]`	Iterate through log field `Records.responseElements.update.params`, then `Records.responseElements.update.params.type` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.update.params.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.configurationValues`	`target.resource.attribute.labels[configuration_values]`
`Records.requestParameters.force`	`target.resource.attribute.labels[force]`

Field mapping reference: AWS CloudTrail - ECR-Public

The following table lists the log fields for the ECR-Public log type and their corresponding UDM fields.

Log field	UDM mapping	Logic
`Records.requestParameters.maxResults`	`target.resource.attribute.labels[max_results]`

Field mapping reference: AWS CloudTrail - Elastic Container Registry

The following table lists the log fields for the Elastic Container Registry log type and their corresponding UDM fields.

Log field	UDM mapping	Logic
`Records.requestParameters.registryId`	`target.resource.product_object_id`
`Records.requestParameters.uploadId`	`target.resource.product_object_id`
`Records.requestParameters.layerDigest`	`target.resource.product_object_id`
`Records.requestParameters.repositoryName`	`target.resource.name`	Iterate through log field `Records.requestParameters.repositoryNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.repositoryNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `repository_names` and `Records.requestParameters.repositoryNames` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.repositoryNames`	`target.resource.name`	Iterate through log field `Records.requestParameters.repositoryNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.repositoryNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `repository_names` and `Records.requestParameters.repositoryNames` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.resourceArn`	`target.resource.name`	Iterate through log field `Records.requestParameters.repositoryNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.repositoryNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `repository_names` and `Records.requestParameters.repositoryNames` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
	`target.resource.resource_type`	If the `Records.eventName` log field value contain one of the following values `BatchGetRepositoryScanningConfiguration` `CreateRepository` `DeleteRepository` `DescribeRepositories` `DescribeRepositoryCreationTemplates` `GetRepositoryPolicy` `ListTagsForResource` `TagResource` `UntagResource` then, the `target.resource.resource_type` UDM field is set to `REPOSITORY`. Else, if the `Records.eventName` log field value contain one of the following values `BatchCheckLayerAvailability` `BatchDeleteImage` `BatchGetImage` `CompleteLayerUpload` `DescribeImageReplicationStatus` `GetDownloadUrlForLayer` `InitiateLayerUpload` `PutImage` `UploadLayerPart` `DescribeImages` `ListImages` then, the `target.resource.resource_type` UDM field is set to `IMAGE`. Else, if the `Records.eventName` log field value contain one of the following values `GetLifecyclePolicy` `GetRegistryPolicy` then, the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY`. Else, if the `Records.eventName` log field value contain one of the following values `GetRegistryScanningConfiguration` `DescribeRegistry` then, the `target.resource.resource_type` UDM field is set to `SETTING`. Else, if the `Records.eventName` log field value is equal to `GetAuthorizationToken` then, the `target.resource.resource_type` UDM field is set to `CREDENTIAL`.
	`target.resource.attribute.cloud.environment`	If the `Records.requestParameters.repositoryName` log field value is not empty or the `Records.requestParameters.resourceArn` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.imageIds.imageDigest`	`target.resource.attribute.labels[req_image_ids_image_digest]`	Iterate through log field `Records.requestParameters.imageIds`, then the `target.resource.attribute.labels.key` UDM field is set to `image_digest` and `Records.requestParameters.imageIds.imageDigest` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.imageIds.imageTag`	`target.resource.attribute.labels[res_image_ids_image_tag]`	Iterate through log field `Records.responseElements.imageIds`, then the `target.resource.attribute.labels.key` UDM field is set to `image_tag` and `Records.responseElements.imageIds.imageTag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.acceptedMediaTypes`	`target.resource.attribute.labels[accepted_media_types]`	Iterate through log field `Records.requestParameters.acceptedMediaTypes`, then the `target.resource.attribute.labels.key` UDM field is set to `accepted_media_types` and `Records.requestParameters.acceptedMediaTypes` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.layerDigests`	`target.resource.attribute.labels[req_layer_digests]`	Iterate through log field `Records.requestParameters.layerDigests`, then the `target.resource.attribute.labels.key` UDM field is set to `req_layer_digests` and `Records.requestParameters.layerDigests` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.repositoryName`	`target.resource.attribute.labels[res_repository_name]`
`Records.responseElements.repository.repositoryName`	`target.resource.attribute.labels[res_repository_name]`
`Records.responseElements.uploadId`	`target.resource.attribute.labels[res_upload_id]`
`Records.responseElements.registryId`	`target.resource.attribute.labels[res_registry_id]`
`Records.responseElements.repository.registryId`	`target.resource.attribute.labels[res_registry_id]`
`Records.responseElements.layerDigest`	`target.resource.attribute.labels[res_layer_digest]`
`Records.requestParameters.imageScanningConfiguration.scanOnPush`	`target.resource.attribute.labels[scan_on_push]`
`Records.requestParameters.imageTagMutability`	`target.resource.attribute.labels[image_tag_mutability]`
`Records.requestParameters.encryptionConfiguration.encryptionType`	`target.resource.attribute.labels[req_encryption_type]`
`Records.responseElements.repository.createdAt`	`target.resource.attribute.creation_time`
`Records.responseElements.repository.repositoryArn`	`target.resource.attribute.labels[res_repository_arn]`
`Records.responseElements.repository.imageTagMutability`	`target.resource.attribute.labels[res_image_tag_mutability]]`
`Records.responseElements.repository.encryptionConfiguration.encryptionType`	`target.resource.attribute.labels[res_encryption_type]`
`Records.responseElements.repository.imageScanningConfiguration.scanOnPush`	`target.resource.attribute.labels[res_scan_on_push]`
`Records.responseElements.repository.repositoryUri`	`target.resource.attribute.labels[res_repository_uri]`
`Records.requestParameters.force`	`target.resource.attribute.labels[req_force]`
`Records.requestParameters.maxResults`	`target.resource.attribute.labels[max_results]`
`Records.requestParameters.registryIds`	`target.resource.attribute.labels[req_registry_ids]`	Iterate through log field `Records.requestParameters.registryIds`, then the `target.resource.attribute.labels.key` UDM field is set to `req_registry_ids` and `Records.requestParameters.registryIds` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.partSize`	`target.resource.attribute.labels[part_size]`
`Records.requestParameters.imageManifest`	`target.resource.attribute.labels[image_manifest]`
`Records.responseElements.image.imageManifest`	`target.resource.attribute.labels[image_manifest]`
`Records.requestParameters.imageManifestMediaType`	`target.resource.attribute.labels[image_manifest_media_type]`
`Records.responseElements.image.imageManifestMediaType`	`target.resource.attribute.labels[image_manifest_media_type]`
`Records.requestParameters.imageTag`	`target.resource.attribute.labels[image_tag]`
`Records.responseElements.image.imageId.imageTag`	`target.resource.attribute.labels[image_tag]`
`Records.responseElements.image.registryId`	`target.resource.attribute.labels[registry_id]`
`Records.responseElements.image.repositoryName`	`target.resource.attribute.labels[repository_name]`
`Records.responseElements.image.imageId.imageDigest`	`target.resource.attribute.labels[image_digest]`	Iterate through log field `Records.responseElements.image.imageId.imageDigest`, then the `target.resource.attribute.labels.key` UDM field is set to `image_digest` and `Records.responseElements.image.imageId.imageDigest` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.lastByteReceived`	`target.network.received_bytes`
`Records.requestParameters.partFirstByte`	`target.resource.attribute.labels[part_first_byte]`
`Records.requestParameters.partLastByte`	`target.resource.attribute.labels[part_last_byte]`
`Records.requestParameters.tags.key`	`target.resource.attribute.labels`	Iterate through log field `Records.requestParameters.tags`, then `Records.requestParameters.tags.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.tags.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.tags.value`	`target.resource.attribute.labels`	Iterate through log field `Records.requestParameters.tags`, then `Records.requestParameters.tags.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.tags.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.filter.tagStatus`	`target.resource.attribute.labels[tag_status]`

Field mapping reference: AWS CloudTrail - Elasticache

The following table lists the log fields for the Elasticache log type and their corresponding UDM fields.

Log field	UDM mapping	Logic
`Records.responseElements.nodeGroups.primaryEndpoint.address`	`about.group.attribute.labels[primary_endpoint_address]`	If the `Records.eventName` log field value is equal to `ModifyReplicationGroup` then, Iterate through log field `Records.responseElements.nodeGroups`, then the `about.group.attribute.labels.key` UDM field is set to `primary_endpoint_address` and `Records.responseElements.nodeGroups.primaryEndpoint.address` log field is mapped to the `about.group.attribute.labels.value` UDM field.
`Records.responseElements.nodeGroups.primaryEndpoint.port`	`about.group.attribute.labels[primary_endpoint_port]`	Iterate through log field `Records.responseElements.nodeGroups`, then the `about.group.attribute.labels.key` UDM field is set to `primary_endpoint_port` and `Records.responseElements.nodeGroups.primaryEndpoint.port` log field is mapped to the `about.group.attribute.labels.value` UDM field.
`Records.responseElements.nodeGroups.nodeGroupMembers.readEndpoint.address`	`about.group.attribute.labels[read_endpoint_address]`	If the `Records.eventName` log field value is equal to `ModifyReplicationGroup` then, Iterate through log field `Records.responseElements.nodeGroups`, then Iterate through log field `Records.responseElements.nodeGroups.nodeGroupMembers`, then the `about.group.attribute.labels.key` UDM field is set to `read_endpoint_address` and `Records.responseElements.nodeGroups.nodeGroupMembers.readEndpoint.address` log field is mapped to the `about.group.attribute.labels.value` UDM field.
`Records.responseElements.nodeGroups.nodeGroupMembers.readEndpoint.port`	`about.group.attribute.labels[read_endpoint_port]`	Iterate through log field `Records.responseElements.nodeGroups`, then Iterate through log field `Records.responseElements.nodeGroups.nodeGroupMembers`, then the `about.group.attribute.labels.key` UDM field is set to `read_endpoint_port` and `Records.responseElements.nodeGroups.nodeGroupMembers.readEndpoint.port` log field is mapped to the `about.group.attribute.labels.value` UDM field.
`Records.responseElements.nodeGroups.readerEndpoint.address`	`about.group.attribute.labels[reader_endpoint_address]`	If the `Records.eventName` log field value is equal to `ModifyReplicationGroup` then, Iterate through log field `Records.responseElements.nodeGroups`, then the `about.group.attribute.labels.key` UDM field is set to `reader_endpoint_address` and `Records.responseElements.nodeGroups.readerEndpoint.address` log field is mapped to the `about.group.attribute.labels.value` UDM field.
`Records.responseElements.nodeGroups.readerEndpoint.port`	`about.group.attribute.labels[reader_endpoint_port]`	Iterate through log field `Records.responseElements.nodeGroups`, then the `about.group.attribute.labels.key` UDM field is set to `reader_endpoint_port` and `Records.responseElements.nodeGroups.readerEndpoint.port` log field is mapped to the `about.group.attribute.labels.value` UDM field.
`Records.responseElements.logDeliveryConfigurations.destinationType`	`about.group.attribute.labels[res_destination_type]`	Iterate through log field `Records.responseElements.logDeliveryConfigurations`, then the `about.group.attribute.labels.key` UDM field is set to `res_destination_type` and `Records.responseElements.logDeliveryConfigurations.destinationType` log field is mapped to the `about.group.attribute.labels.value` UDM field.
`Records.responseElements.logDeliveryConfigurations.logFormat`	`about.group.attribute.labels[res_log_format]`	Iterate through log field `Records.responseElements.logDeliveryConfigurations`, then the `about.group.attribute.labels.key` UDM field is set to `res_log_format` and `Records.responseElements.logDeliveryConfigurations.logFormat` log field is mapped to the `about.group.attribute.labels.value` UDM field.
`Records.responseElements.logDeliveryConfigurations.logType`	`about.group.attribute.labels[res_log_type]`	Iterate through log field `Records.responseElements.logDeliveryConfigurations`, then the `about.group.attribute.labels.key` UDM field is set to `res_log_type` and `Records.responseElements.logDeliveryConfigurations.logType` log field is mapped to the `about.group.attribute.labels.value` UDM field.
`Records.responseElements.nodeGroups.nodeGroupMembers.cacheClusterId`	`about.group.attribute.labels[res_node_group_cache_cluster_id]`	Iterate through log field `Records.responseElements.nodeGroups`, then Iterate through log field `Records.responseElements.nodeGroups.nodeGroupMembers`, then the `about.group.attribute.labels.key` UDM field is set to `res_node_group_cache_cluster_id` and `Records.responseElements.nodeGroups.nodeGroupMembers.cacheClusterId` log field is mapped to the `about.group.attribute.labels.value` UDM field.
`Records.responseElements.nodeGroups.nodeGroupMembers.cacheNodeId`	`about.group.attribute.labels[res_node_group_cache_node_id]`	Iterate through log field `Records.responseElements.nodeGroups`, then Iterate through log field `Records.responseElements.nodeGroups.nodeGroupMembers`, then the `about.group.attribute.labels.key` UDM field is set to `res_node_group_cache_node_id` and `Records.responseElements.nodeGroups.nodeGroupMembers.cacheNodeId` log field is mapped to the `about.group.attribute.labels.value` UDM field.
`Records.responseElements.nodeGroups.nodeGroupMembers.currentRole`	`about.group.attribute.labels[res_node_group_current_role]`	Iterate through log field `Records.responseElements.nodeGroups`, then Iterate through log field `Records.responseElements.nodeGroups.nodeGroupMembers`, then the `about.group.attribute.labels.key` UDM field is set to `res_node_group_current_role` and `Records.responseElements.nodeGroups.nodeGroupMembers.currentRole` log field is mapped to the `about.group.attribute.labels.value` UDM field.
`Records.responseElements.nodeGroups.slots`	`about.group.attribute.labels[res_node_groups_slots]`	Iterate through log field `Records.responseElements.nodeGroups`, then the `about.group.attribute.labels.key` UDM field is set to `res_node_groups_slots` and `Records.responseElements.nodeGroups.slots` log field is mapped to the `about.group.attribute.labels.value` UDM field.
`Records.responseElements.nodeGroups.status`	`about.group.attribute.labels[res_node_groups_status]`	Iterate through log field `Records.responseElements.nodeGroups`, then the `about.group.attribute.labels.key` UDM field is set to `res_node_groups_status` and `Records.responseElements.nodeGroups.status` log field is mapped to the `about.group.attribute.labels.value` UDM field.
`Records.responseElements.nodeGroups.nodeGroupMembers.preferredAvailabilityZone`	`about.group.attribute.labels[res_preferred_availability_zone]`	Iterate through log field `Records.responseElements.nodeGroups`, then Iterate through log field `Records.responseElements.nodeGroups.nodeGroupMembers`, then the `about.group.attribute.labels.key` UDM field is set to `res_preferred_availability_zone` and `Records.responseElements.nodeGroups.nodeGroupMembers.preferredAvailabilityZone` log field is mapped to the `about.group.attribute.labels.value` UDM field.
`Records.responseElements.logDeliveryConfigurations.status`	`about.group.attribute.labels[res_status]`	Iterate through log field `Records.responseElements.logDeliveryConfigurations`, then the `about.group.attribute.labels.key` UDM field is set to `res_status` and `Records.responseElements.logDeliveryConfigurations.status` log field is mapped to the `about.group.attribute.labels.value` UDM field.
`Records.responseElements.logDeliveryConfigurations.destinationDetails.cloudWatchLogsDetails.logGroup`	`about.group.group_display_name`	If the `Records.eventName` log field value is equal to `ModifyReplicationGroup` then, Iterate through log field `Records.responseElements.logDeliveryConfigurations`, then `Records.responseElements.logDeliveryConfigurations.destinationDetails.cloudWatchLogsDetails.logGroup` log field is mapped to the `about.group.group_display_name` UDM field.
`Records.responseElements.nodeGroups.nodeGroupId`	`about.group.product_object_id`	Iterate through log field `Records.responseElements.nodeGroups`, then If the `Records.responseElements.nodeGroups.nodeGroupId` log field value is not empty then, `Records.responseElements.nodeGroups.nodeGroupId` log field is mapped to the `about.group.product_object_id` UDM field.
`Records.responseElements.memberClusters`	`about.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateReplicationGroup` `ModifyReplicationGroup` then, Iterate through log field `Records.responseElements.memberClusters`, then `Records.responseElements.memberClusters` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `CLUSTER` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateServerlessCache` `ModifyServerlessCache` and if the `Records.responseElements.serverlessCache.serverlessCacheName` log field value is not empty then, `Records.responseElements.serverlessCache.serverlessCacheName` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `CONTAINER` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeServerlessCaches` and if the `Records.requestParameters.serverlessCacheName` log field value is not empty then, `Records.requestParameters.serverlessCacheName` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `CONTAINER` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.serverlessCache.serverlessCacheName`	`about.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateReplicationGroup` `ModifyReplicationGroup` then, Iterate through log field `Records.responseElements.memberClusters`, then `Records.responseElements.memberClusters` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `CLUSTER` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateServerlessCache` `ModifyServerlessCache` and if the `Records.responseElements.serverlessCache.serverlessCacheName` log field value is not empty then, `Records.responseElements.serverlessCache.serverlessCacheName` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `CONTAINER` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeServerlessCaches` and if the `Records.requestParameters.serverlessCacheName` log field value is not empty then, `Records.requestParameters.serverlessCacheName` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `CONTAINER` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.serverlessCacheName`	`about.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateReplicationGroup` `ModifyReplicationGroup` then, Iterate through log field `Records.responseElements.memberClusters`, then `Records.responseElements.memberClusters` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `CLUSTER` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateServerlessCache` `ModifyServerlessCache` and if the `Records.responseElements.serverlessCache.serverlessCacheName` log field value is not empty then, `Records.responseElements.serverlessCache.serverlessCacheName` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `CONTAINER` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeServerlessCaches` and if the `Records.requestParameters.serverlessCacheName` log field value is not empty then, `Records.requestParameters.serverlessCacheName` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `CONTAINER` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.networkType`	`additional.fields[network_type]`	If the `Records.requestParameters.networkType` log field value is not empty then, the `additional.fields.key` UDM field is set to `network_type` and `Records.requestParameters.networkType` log field is mapped to the `additional.fields.value.string_value` UDM field. Else, the `additional.fields.key` UDM field is set to `network_type` and `Records.responseElements.networkType` log field is mapped to the `additional.fields.value.string_value` UDM field.
`Records.responseElements.networkType`	`additional.fields[network_type]`	If the `Records.requestParameters.networkType` log field value is not empty then, the `additional.fields.key` UDM field is set to `network_type` and `Records.requestParameters.networkType` log field is mapped to the `additional.fields.value.string_value` UDM field. Else, the `additional.fields.key` UDM field is set to `network_type` and `Records.responseElements.networkType` log field is mapped to the `additional.fields.value.string_value` UDM field.
`Records.requestParameters.applyImmediately`	`additional.fields[req_apply_immediately]`
`Records.requestParameters.atRestEncryptionEnabled`	`additional.fields[req_at_rest_encryption_enabled]`
`Records.requestParameters.autoMinorVersionUpgrade`	`additional.fields[req_auto_minor_version_upgrade]`
`Records.requestParameters.automaticFailoverEnabled`	`additional.fields[req_automatic_failover_enabled]`
`Records.requestParameters.defaultOnly`	`additional.fields[req_default_only]`
`Records.requestParameters.duration`	`additional.fields[req_duration]`
`Records.requestParameters.endTime`	`additional.fields[req_end_time]`
`Records.requestParameters.marker`	`additional.fields[req_marker]`
`Records.requestParameters.maxRecords`	`additional.fields[req_max_records]`
`Records.requestParameters.maxResults`	`additional.fields[req_max_results]`
`Records.requestParameters.multiAZEnabled`	`additional.fields[req_multi_az_enabled]`
`Records.requestParameters.preferredCacheClusterAZs`	`additional.fields[req_preferred_cache_cluster_azs]`	Iterate through log field `Records.preferredCacheClusterAZs`, then the `additional.fields.key` UDM field is set to `req_preferred_cache_cluster_azs` and `Records.requestParameters.preferredCacheClusterAZs` log field is mapped to the `additional.fields.value.string_value` UDM field.
`Records.requestParameters.showCacheClustersNotInReplicationGroups`	`additional.fields[req_show_cache_clusters_not_in_replication_groups]`
`Records.requestParameters.showCacheNodeInfo`	`additional.fields[req_show_cache_node_info]`
`Records.requestParameters.showMemberInfo`	`additional.fields[req_show_member_info]`
`Records.requestParameters.showNodeGroupConfig`	`additional.fields[req_show_node_group_config]`
`Records.requestParameters.snapshotRetentionLimit`	`additional.fields[req_snapshot_retention_limit]`
`Records.requestParameters.startTime`	`additional.fields[req_start_time]`
`Records.requestParameters.transitEncryptionEnabled`	`additional.fields[req_transit_encryption_enabled]`	If the `Records.responseElements.transitEncryptionEnabled` log field value is not empty then, the `additional.fields.key` UDM field is set to `transit_encryption_enabled` and `Records.responseElements.transitEncryptionEnabled` log field is mapped to the `additional.fields.value.string_value` UDM field. Else, the `additional.fields.key` UDM field is set to `transit_encryption_enabled` and `Records.requestParameters.transitEncryptionEnabled` log field is mapped to the `additional.fields.value.string_value` UDM field.
`Records.responseElements.transitEncryptionEnabled`	`additional.fields[req_transit_encryption_enabled]`	If the `Records.responseElements.transitEncryptionEnabled` log field value is not empty then, the `additional.fields.key` UDM field is set to `transit_encryption_enabled` and `Records.responseElements.transitEncryptionEnabled` log field is mapped to the `additional.fields.value.string_value` UDM field. Else, the `additional.fields.key` UDM field is set to `transit_encryption_enabled` and `Records.requestParameters.transitEncryptionEnabled` log field is mapped to the `additional.fields.value.string_value` UDM field.
`Records.responseElements.atRestEncryptionEnabled`	`additional.fields[res_at_rest_encryption_enabled]`
`Records.responseElements.autoMinorVersionUpgrade`	`additional.fields[res_auto_minor_version_upgrade]`
`Records.responseElements.automaticFailover`	`additional.fields[res_automatic_failover]`
`Records.responseElements.clusterEnabled`	`additional.fields[res_cluster_enabled]`
`Records.responseElements.clusterMode`	`additional.fields[res_cluster_mode]`
`Records.responseElements.deleteProtection`	`additional.fields[res_delete_protection]`
`Records.responseElements.description`	`additional.fields[res_description]`
`Records.responseElements.ipDiscovery`	`additional.fields[res_ip_discovery]`
`Records.responseElements.multiAZ`	`additional.fields[res_multi_az]`
`Records.responseElements.serverlessCache.snapshotRetentionLimit`	`additional.fields[res_serverless_cache_snapshot_retention_limit]`
`Records.responseElements.snapshotRetentionLimit`	`additional.fields[res_snapshot_retention_limit]`
`Records.responseElements.snapshotWindow`	`additional.fields[res_snapshot_window]`
`Records.responseElements.status`	`additional.fields[res_status]`	If the `Records.responseElements.status` log field value is not empty then, the `additional.fields.key` UDM field is set to `res_status` and `Records.responseElements.status` log field is mapped to the `additional.fields.value.string_value` UDM field. Else, the `additional.fields.key` UDM field is set to `res_status` and `Records.responseElements.serverlessCache.status` log field is mapped to the `additional.fields.value.string_value` UDM field.
`Records.responseElements.serverlessCache.status`	`additional.fields[res_status]`	If the `Records.responseElements.status` log field value is not empty then, the `additional.fields.key` UDM field is set to `res_status` and `Records.responseElements.status` log field is mapped to the `additional.fields.value.string_value` UDM field. Else, the `additional.fields.key` UDM field is set to `res_status` and `Records.responseElements.serverlessCache.status` log field is mapped to the `additional.fields.value.string_value` UDM field.
`Records.responseElements.transitEncryptionMode`	`additional.fields[res_transit_encryption_mode]`	If the `Records.responseElements.transitEncryptionMode` log field value is not empty then, the `additional.fields.key` UDM field is set to `transit_encryption_mode` and `Records.responseElements.transitEncryptionMode` log field is mapped to the `additional.fields.value.string_value` UDM field. Else, the `additional.fields.key` UDM field is set to `transit_encryption_mode` and `Records.requestParameters.transitEncryptionMode` log field is mapped to the `additional.fields.value.string_value` UDM field.
`Records.requestParameters.transitEncryptionMode`	`additional.fields[res_transit_encryption_mode]`	If the `Records.responseElements.transitEncryptionMode` log field value is not empty then, the `additional.fields.key` UDM field is set to `transit_encryption_mode` and `Records.responseElements.transitEncryptionMode` log field is mapped to the `additional.fields.value.string_value` UDM field. Else, the `additional.fields.key` UDM field is set to `transit_encryption_mode` and `Records.requestParameters.transitEncryptionMode` log field is mapped to the `additional.fields.value.string_value` UDM field.
`Records.requestParameters.authTokenUpdateStrategy`	`security_result.detection_fields[req_auth_token_update_strategy]`
`Records.requestParameters.authToken`	`security_result.detection_fields[req_auth_token]`
`Records.requestParameters.serviceUpdateStatus`	`security_result.detection_fields[req_service_update_status]`	Iterate through log field `Records.requestParameters.serviceUpdateStatus`, then the `security_result.detection_fields.key` UDM field is set to `req_service_update_status` and `Records.requestParameters.serviceUpdateStatus` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.responseElements.replicationGroupCreateTime`	`target.group.attribute.creation_time`	If the `Records.eventName` log field value contain one of the following values `DeleteReplicationGroup` `CreateReplicationGroup` `ModifyReplicationGroup` then, `Records.responseElements.replicationGroupCreateTime` log field is mapped to the `target.group.attribute.creation_time` UDM field.
`Records.requestParameters.cacheNodeType`	`target.group.attribute.labels[req_cache_node_type]`	If the `Records.responseElements.cacheNodeType` log field value is not empty then, the `target.group.attribute.labels.key` UDM field is set to `res_cache_node_type` and `Records.responseElements.cacheNodeType` log field is mapped to the `target.group.attribute.labels.value` UDM field. Else, the `target.group.attribute.labels.key` UDM field is set to `req_cache_node_type` and `Records.requestParameters.cacheNodeType` log field is mapped to the `target.group.attribute.labels.value` UDM field.
`Records.responseElements.cacheNodeType`	`target.group.attribute.labels[req_cache_node_type]`	If the `Records.responseElements.cacheNodeType` log field value is not empty then, the `target.group.attribute.labels.key` UDM field is set to `res_cache_node_type` and `Records.responseElements.cacheNodeType` log field is mapped to the `target.group.attribute.labels.value` UDM field. Else, the `target.group.attribute.labels.key` UDM field is set to `req_cache_node_type` and `Records.requestParameters.cacheNodeType` log field is mapped to the `target.group.attribute.labels.value` UDM field.
`Records.requestParameters.cacheParameterGroupName`	`target.group.attribute.labels[req_cache_parameter_group_name]`
`Records.requestParameters.engineVersion`	`target.group.attribute.labels[req_engine_version]`
`Records.requestParameters.engine`	`target.group.attribute.labels[req_engine]`
`Records.requestParameters.numCacheClusters`	`target.group.attribute.labels[req_num_cache_clusters]`
`Records.requestParameters.numNodeGroups`	`target.group.attribute.labels[req_num_node_groups]`
`Records.requestParameters.replicasPerNodeGroup`	`target.group.attribute.labels[req_replicas_per_node_group]`
`Records.requestParameters.replicationGroupDescription`	`target.group.attribute.labels[req_replication_group_description]`
`Records.requestParameters.sourceIdentifier`	`target.group.attribute.labels[req_source_identifier]`
`Records.requestParameters.sourceType`	`target.group.attribute.labels[req_source_type]`
`Records.responseElements.dataTiering`	`target.group.attribute.labels[res_data_tiering]`
`Records.responseElements.snapshottingClusterId`	`target.group.attribute.labels[res_snapshotting_cluster_id]`
`Records.responseElements.pendingModifiedValues.transitEncryptionMode`	`target.group.attribute.labels[res_transit_encryption_mode]`
`Records.requestParameters.cacheSubnetGroupName`	`target.group.group_display_name`	If the `Records.eventName` log field value is equal to `DescribeCacheSubnetGroups` then, `Records.requestParameters.cacheSubnetGroupName` log field is mapped to the `target.group.group_display_name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteReplicationGroup` then, `Records.requestParameters.finalSnapshotIdentifier` log field is mapped to the `target.group.group_display_name` UDM field.
`Records.requestParameters.finalSnapshotIdentifier`	`target.group.group_display_name`	If the `Records.eventName` log field value is equal to `DescribeCacheSubnetGroups` then, `Records.requestParameters.cacheSubnetGroupName` log field is mapped to the `target.group.group_display_name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteReplicationGroup` then, `Records.requestParameters.finalSnapshotIdentifier` log field is mapped to the `target.group.group_display_name` UDM field.
`Records.requestParameters.replicationGroupId`	`target.group.product_object_id`	If the `Records.eventName` log field value contain one of the following values `CreateReplicationGroup` `DeleteReplicationGroup` `ModifyReplicationGroup` `ListAllowedNodeTypeModifications` `DescribeReplicationGroups` then, the `target.group.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. If the `Records.requestParameters.replicationGroupId` log field value is not empty then, `Records.requestParameters.replicationGroupId` log field is mapped to the `target.group.product_object_id` UDM field. Else, `Records.responseElements.replicationGroupId` log field is mapped to the `target.group.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeUpdateActions` then, Iterate through log field `Records.requestParameters.replicationGroupIds`, then If the `index` value is equal to `0` then, `Records.requestParameters.replicationGroupIds` log field is mapped to the `target.group.product_object_id` UDM field. Else, `Records.requestParameters.replicationGroupIds` log field is mapped to the `about.group.product_object_id` UDM field.
`Records.requestParameters.replicationGroupIds`	`target.group.product_object_id`	If the `Records.eventName` log field value contain one of the following values `CreateReplicationGroup` `DeleteReplicationGroup` `ModifyReplicationGroup` `ListAllowedNodeTypeModifications` `DescribeReplicationGroups` then, the `target.group.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. If the `Records.requestParameters.replicationGroupId` log field value is not empty then, `Records.requestParameters.replicationGroupId` log field is mapped to the `target.group.product_object_id` UDM field. Else, `Records.responseElements.replicationGroupId` log field is mapped to the `target.group.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeUpdateActions` then, Iterate through log field `Records.requestParameters.replicationGroupIds`, then If the `index` value is equal to `0` then, `Records.requestParameters.replicationGroupIds` log field is mapped to the `target.group.product_object_id` UDM field. Else, `Records.requestParameters.replicationGroupIds` log field is mapped to the `about.group.product_object_id` UDM field.
`Records.responseElements.replicationGroupId`	`target.group.product_object_id`	If the `Records.eventName` log field value contain one of the following values `CreateReplicationGroup` `DeleteReplicationGroup` `ModifyReplicationGroup` `ListAllowedNodeTypeModifications` `DescribeReplicationGroups` then, the `target.group.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. If the `Records.requestParameters.replicationGroupId` log field value is not empty then, `Records.requestParameters.replicationGroupId` log field is mapped to the `target.group.product_object_id` UDM field. Else, `Records.responseElements.replicationGroupId` log field is mapped to the `target.group.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeUpdateActions` then, Iterate through log field `Records.requestParameters.replicationGroupIds`, then If the `index` value is equal to `0` then, `Records.requestParameters.replicationGroupIds` log field is mapped to the `target.group.product_object_id` UDM field. Else, `Records.requestParameters.replicationGroupIds` log field is mapped to the `about.group.product_object_id` UDM field.
`Records.responseElements.configurationEndpoint.address`	`target.hostname`	If the `Records.eventName` log field value is equal to `ModifyServerlessCache` and if the `Records.responseElements.configurationEndpoint.address` log field value is not empty then, `Records.responseElements.configurationEndpoint.address` log field is mapped to the `target.hostname` UDM field. Else, if the `Records.responseElements.serverlessCache.endpoint.address` log field value is not empty then, `Records.responseElements.serverlessCache.endpoint.address` log field is mapped to the `target.hostname` UDM field. Else, `Records.responseElements.serverlessCache.readerEndpoint.address` log field is mapped to the `target.hostname` UDM field.
`Records.responseElements.serverlessCache.endpoint.address`	`target.hostname`	If the `Records.eventName` log field value is equal to `ModifyServerlessCache` and if the `Records.responseElements.configurationEndpoint.address` log field value is not empty then, `Records.responseElements.configurationEndpoint.address` log field is mapped to the `target.hostname` UDM field. Else, if the `Records.responseElements.serverlessCache.endpoint.address` log field value is not empty then, `Records.responseElements.serverlessCache.endpoint.address` log field is mapped to the `target.hostname` UDM field. Else, `Records.responseElements.serverlessCache.readerEndpoint.address` log field is mapped to the `target.hostname` UDM field.
`Records.responseElements.serverlessCache.readerEndpoint.address`	`target.hostname`	If the `Records.eventName` log field value is equal to `ModifyServerlessCache` and if the `Records.responseElements.configurationEndpoint.address` log field value is not empty then, `Records.responseElements.configurationEndpoint.address` log field is mapped to the `target.hostname` UDM field. Else, if the `Records.responseElements.serverlessCache.endpoint.address` log field value is not empty then, `Records.responseElements.serverlessCache.endpoint.address` log field is mapped to the `target.hostname` UDM field. Else, `Records.responseElements.serverlessCache.readerEndpoint.address` log field is mapped to the `target.hostname` UDM field.
`Records.responseElements.configurationEndpoint.port`	`target.port`	If the `Records.eventName` log field value is equal to `ModifyServerlessCache` and if the `Records.responseElements.configurationEndpoint.port` log field value is not empty then, `Records.responseElements.configurationEndpoint.port` log field is mapped to the `target.port` UDM field. Else, if the `Records.responseElements.serverlessCache.endpoint.port` log field value is not empty then, `Records.responseElements.serverlessCache.endpoint.port` log field is mapped to the `target.port` UDM field. Else, `Records.responseElements.serverlessCache.readerEndpoint.port` log field is mapped to the `target.port` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateReplicationGroup` then, `Records.requestParameters.port` log field is mapped to the `target.port` UDM field.
`Records.responseElements.serverlessCache.endpoint.port`	`target.port`	If the `Records.eventName` log field value is equal to `ModifyServerlessCache` and if the `Records.responseElements.configurationEndpoint.port` log field value is not empty then, `Records.responseElements.configurationEndpoint.port` log field is mapped to the `target.port` UDM field. Else, if the `Records.responseElements.serverlessCache.endpoint.port` log field value is not empty then, `Records.responseElements.serverlessCache.endpoint.port` log field is mapped to the `target.port` UDM field. Else, `Records.responseElements.serverlessCache.readerEndpoint.port` log field is mapped to the `target.port` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateReplicationGroup` then, `Records.requestParameters.port` log field is mapped to the `target.port` UDM field.
`Records.responseElements.serverlessCache.readerEndpoint.port`	`target.port`	If the `Records.eventName` log field value is equal to `ModifyServerlessCache` and if the `Records.responseElements.configurationEndpoint.port` log field value is not empty then, `Records.responseElements.configurationEndpoint.port` log field is mapped to the `target.port` UDM field. Else, if the `Records.responseElements.serverlessCache.endpoint.port` log field value is not empty then, `Records.responseElements.serverlessCache.endpoint.port` log field is mapped to the `target.port` UDM field. Else, `Records.responseElements.serverlessCache.readerEndpoint.port` log field is mapped to the `target.port` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateReplicationGroup` then, `Records.requestParameters.port` log field is mapped to the `target.port` UDM field.
`Records.requestParameters.port`	`target.port`	If the `Records.eventName` log field value is equal to `ModifyServerlessCache` and if the `Records.responseElements.configurationEndpoint.port` log field value is not empty then, `Records.responseElements.configurationEndpoint.port` log field is mapped to the `target.port` UDM field. Else, if the `Records.responseElements.serverlessCache.endpoint.port` log field value is not empty then, `Records.responseElements.serverlessCache.endpoint.port` log field is mapped to the `target.port` UDM field. Else, `Records.responseElements.serverlessCache.readerEndpoint.port` log field is mapped to the `target.port` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateReplicationGroup` then, `Records.requestParameters.port` log field is mapped to the `target.port` UDM field.
`Records.responseElements.serverlessCache.createTime`	`target.resource.attribute.creation_time`	If the `Records.eventName` log field value contain one of the following values `CreateServerlessCache` `ModifyServerlessCache` then, `Records.responseElements.serverlessCache.createTime` log field is mapped to the `target.resource.attribute.creation_time` UDM field.
`Records.requestParameters.serviceUpdateName`	`target.resource.attribute.labels[req_service_update_name]`
`Records.requestParameters.updateActionStatus`	`target.resource.attribute.labels[req_update_action_status]`	Iterate through log field `Records.requestParameters.updateActionStatus`, then the `target.resource.attribute.labels.key` UDM field is set to `req_update_action_status` and `Records.requestParameters.updateActionStatus` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.serverlessCache.dailySnapshotTime`	`target.resource.attribute.labels[res_daily_snapshot_time]`
`Records.responseElements.serverlessCache.description`	`target.resource.attribute.labels[res_description]`
`Records.responseElements.serverlessCache.engine`	`target.resource.attribute.labels[res_engine]`
`Records.responseElements.serverlessCache.fullEngineVersion`	`target.resource.attribute.labels[res_full_engine_version]`
`Records.responseElements.serverlessCache.majorEngineVersion`	`target.resource.attribute.labels[res_major_engine_version]`
`Records.responseElements.serverlessCache.cacheUsageLimits.dataStorage.maximum`	`target.resource.attribute.labels[res_maximum]`
`Records.responseElements.serverlessCache.subnetIds`	`target.resource.attribute.labels[res_subnet_ids]`	Iterate through log field `Records.responseElements.serverlessCache.subnetIds`, then the `target.resource.attribute.labels.key` UDM field is set to `res_subnet_ids` and `Records.responseElements.serverlessCache.subnetIds` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.serverlessCache.cacheUsageLimits.dataStorage.unit`	`target.resource.attribute.labels[res_unit]`
`Records.responseElements.aRN`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateReplicationGroup` `DeleteReplicationGroup` `ModifyReplicationGroup` and if the `Records.responseElements.aRN` log field value is not empty then, `Records.responseElements.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceName` log field value is not empty then, `Records.requestParameters.resourceName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateServerlessCache` `ModifyServerlessCache` and if the `Records.responseElements.serverlessCache.aRN` log field value is not empty then, `Records.responseElements.serverlessCache.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.resourceName`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateReplicationGroup` `DeleteReplicationGroup` `ModifyReplicationGroup` and if the `Records.responseElements.aRN` log field value is not empty then, `Records.responseElements.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceName` log field value is not empty then, `Records.requestParameters.resourceName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateServerlessCache` `ModifyServerlessCache` and if the `Records.responseElements.serverlessCache.aRN` log field value is not empty then, `Records.responseElements.serverlessCache.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.serverlessCache.aRN`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateReplicationGroup` `DeleteReplicationGroup` `ModifyReplicationGroup` and if the `Records.responseElements.aRN` log field value is not empty then, `Records.responseElements.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceName` log field value is not empty then, `Records.requestParameters.resourceName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateServerlessCache` `ModifyServerlessCache` and if the `Records.responseElements.serverlessCache.aRN` log field value is not empty then, `Records.responseElements.serverlessCache.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.cacheClusterIds`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `DescribeUpdateActions` then, Iterate through log field `Records.requestParameters.cacheClusterIds`, then If the `index` value is equal to `0` then, `Records.requestParameters.cacheClusterId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.cacheClusterId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeUpdateActions` and if the `Records.requestParameters.cacheClusterId` log field value is not empty then, `Records.requestParameters.cacheClusterId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.cacheClusterId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `DescribeUpdateActions` then, Iterate through log field `Records.requestParameters.cacheClusterIds`, then If the `index` value is equal to `0` then, `Records.requestParameters.cacheClusterId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.cacheClusterId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeUpdateActions` and if the `Records.requestParameters.cacheClusterId` log field value is not empty then, `Records.requestParameters.cacheClusterId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
	`target.resource.resource_type`	If the `Records.eventName` log field value contain one of the following values `CreateReplicationGroup` `DeleteReplicationGroup` `ModifyReplicationGroup` and if the `Records.responseElements.aRN` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `CONTAINER`. Else, if the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceName` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `CONTAINER`. Else, if the `Records.eventName` log field value contain one of the following values `CreateServerlessCache` `ModifyServerlessCache` and if the `Records.responseElements.serverlessCache.aRN` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `CONTAINER`.
`Records.requestParameters.securityGroupIds`	`target.user.group_identifiers`	If the `Records.eventName` log field value contain one of the following values `CreateReplicationGroup` `DeleteReplicationGroup` `ModifyReplicationGroup` then, Iterate through log field `Records.requestParameters.securityGroupIds`, then `Records.requestParameters.securityGroupIds` log field is mapped to the `target.user.group_identifiers` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateServerlessCache` `ModifyServerlessCache` then, Iterate through log field `Records.responseElements.serverlessCache.securityGroupIds`, then `Records.responseElements.serverlessCache.securityGroupIds` log field is mapped to the `target.user.group_identifiers` UDM field.
`Records.responseElements.serverlessCache.securityGroupIds`	`target.user.group_identifiers`	If the `Records.eventName` log field value contain one of the following values `CreateReplicationGroup` `DeleteReplicationGroup` `ModifyReplicationGroup` then, Iterate through log field `Records.requestParameters.securityGroupIds`, then `Records.requestParameters.securityGroupIds` log field is mapped to the `target.user.group_identifiers` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateServerlessCache` `ModifyServerlessCache` then, Iterate through log field `Records.responseElements.serverlessCache.securityGroupIds`, then `Records.responseElements.serverlessCache.securityGroupIds` log field is mapped to the `target.user.group_identifiers` UDM field.
`Records.requestParameters.userId`	`target.user.userid`	If the `Records.eventName` log field value is equal to `DescribeUsers` then, `Records.requestParameters.userId` log field is mapped to the `target.user.userid` UDM field.

Field mapping reference: AWS CloudTrail - Elastic Container Service

The following table lists the log fields for the Elastic Container Service log type and their corresponding UDM fields.

Field mapping reference: AWS CloudTrail - Route53

The following table lists the log fields for the Route53 log type and their corresponding UDM fields.

Log field	UDM mapping	Logic
`Records.requestParameters.vPC.vPCId`	`target.resource.name`	If the `Records.eventName` log field value is equal to `AssociateVPCWithHostedZone` and if the `Records.requestParameters.vPC.vPCId` log field value is not empty then, `Records.requestParameters.vPC.vPCId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ChangeTagsForResource` `ListTagsForResource` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetFirewallConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetChange` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHostedZone` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetQueryLoggingConfig` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetDNSSEC` `ListQueryLoggingConfigs` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListHostedZonesByName` `ListResourceRecordSets` `ChangeResourceRecordSets` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHealthCheck` and if the `Records.requestParameters.healthCheckId` log field value is not empty then, `Records.requestParameters.healthCheckId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFirewallDomainList` `ListFirewallDomains` and if the `Records.requestParameters.firewallDomainListId` log field value is not empty then, `Records.requestParameters.firewallDomainListId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverEndpoint` `ListResolverEndpointIpAddresses` and if the `Records.requestParameters.resolverEndpointId` log field value is not empty then, `Records.requestParameters.resolverEndpointId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverRule` `AssociateResolverRule` and if the `Records.requestParameters.resolverRuleId` log field value is not empty then, `Records.requestParameters.resolverRuleId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverRuleAssociation` and if the `Records.requestParameters.resolverRuleAssociationId` log field value is not empty then, `Records.requestParameters.resolverRuleAssociationId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListFirewallRuleGroupAssociations` and if the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResolverQueryLogConfigAssociations` then, Iterate through log field `Records.requestParameters.filters`, then If the `Records.requestParameters.filters.name` log field value is equal to `ResourceId` then, Iterate through log field `Records.requestParameters.filters.values`, then If the `index` value is equal to `0` then, `Records.requestParameters.filters.values` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.filters.values` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `GATEWAY` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateHealthCheck` and if the `Records.responseElements.location` log field value is not empty then, `Records.responseElements.location` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.resourceId`	`target.resource.name`	If the `Records.eventName` log field value is equal to `AssociateVPCWithHostedZone` and if the `Records.requestParameters.vPC.vPCId` log field value is not empty then, `Records.requestParameters.vPC.vPCId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ChangeTagsForResource` `ListTagsForResource` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetFirewallConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetChange` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHostedZone` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetQueryLoggingConfig` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetDNSSEC` `ListQueryLoggingConfigs` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListHostedZonesByName` `ListResourceRecordSets` `ChangeResourceRecordSets` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHealthCheck` and if the `Records.requestParameters.healthCheckId` log field value is not empty then, `Records.requestParameters.healthCheckId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFirewallDomainList` `ListFirewallDomains` and if the `Records.requestParameters.firewallDomainListId` log field value is not empty then, `Records.requestParameters.firewallDomainListId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverEndpoint` `ListResolverEndpointIpAddresses` and if the `Records.requestParameters.resolverEndpointId` log field value is not empty then, `Records.requestParameters.resolverEndpointId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverRule` `AssociateResolverRule` and if the `Records.requestParameters.resolverRuleId` log field value is not empty then, `Records.requestParameters.resolverRuleId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverRuleAssociation` and if the `Records.requestParameters.resolverRuleAssociationId` log field value is not empty then, `Records.requestParameters.resolverRuleAssociationId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListFirewallRuleGroupAssociations` and if the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResolverQueryLogConfigAssociations` then, Iterate through log field `Records.requestParameters.filters`, then If the `Records.requestParameters.filters.name` log field value is equal to `ResourceId` then, Iterate through log field `Records.requestParameters.filters.values`, then If the `index` value is equal to `0` then, `Records.requestParameters.filters.values` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.filters.values` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `GATEWAY` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateHealthCheck` and if the `Records.responseElements.location` log field value is not empty then, `Records.responseElements.location` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.id`	`target.resource.name`	If the `Records.eventName` log field value is equal to `AssociateVPCWithHostedZone` and if the `Records.requestParameters.vPC.vPCId` log field value is not empty then, `Records.requestParameters.vPC.vPCId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ChangeTagsForResource` `ListTagsForResource` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetFirewallConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetChange` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHostedZone` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetQueryLoggingConfig` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetDNSSEC` `ListQueryLoggingConfigs` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListHostedZonesByName` `ListResourceRecordSets` `ChangeResourceRecordSets` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHealthCheck` and if the `Records.requestParameters.healthCheckId` log field value is not empty then, `Records.requestParameters.healthCheckId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFirewallDomainList` `ListFirewallDomains` and if the `Records.requestParameters.firewallDomainListId` log field value is not empty then, `Records.requestParameters.firewallDomainListId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverEndpoint` `ListResolverEndpointIpAddresses` and if the `Records.requestParameters.resolverEndpointId` log field value is not empty then, `Records.requestParameters.resolverEndpointId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverRule` `AssociateResolverRule` and if the `Records.requestParameters.resolverRuleId` log field value is not empty then, `Records.requestParameters.resolverRuleId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverRuleAssociation` and if the `Records.requestParameters.resolverRuleAssociationId` log field value is not empty then, `Records.requestParameters.resolverRuleAssociationId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListFirewallRuleGroupAssociations` and if the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResolverQueryLogConfigAssociations` then, Iterate through log field `Records.requestParameters.filters`, then If the `Records.requestParameters.filters.name` log field value is equal to `ResourceId` then, Iterate through log field `Records.requestParameters.filters.values`, then If the `index` value is equal to `0` then, `Records.requestParameters.filters.values` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.filters.values` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `GATEWAY` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateHealthCheck` and if the `Records.responseElements.location` log field value is not empty then, `Records.responseElements.location` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.hostedZoneId`	`target.resource.name`	If the `Records.eventName` log field value is equal to `AssociateVPCWithHostedZone` and if the `Records.requestParameters.vPC.vPCId` log field value is not empty then, `Records.requestParameters.vPC.vPCId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ChangeTagsForResource` `ListTagsForResource` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetFirewallConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetChange` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHostedZone` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetQueryLoggingConfig` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetDNSSEC` `ListQueryLoggingConfigs` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListHostedZonesByName` `ListResourceRecordSets` `ChangeResourceRecordSets` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHealthCheck` and if the `Records.requestParameters.healthCheckId` log field value is not empty then, `Records.requestParameters.healthCheckId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFirewallDomainList` `ListFirewallDomains` and if the `Records.requestParameters.firewallDomainListId` log field value is not empty then, `Records.requestParameters.firewallDomainListId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverEndpoint` `ListResolverEndpointIpAddresses` and if the `Records.requestParameters.resolverEndpointId` log field value is not empty then, `Records.requestParameters.resolverEndpointId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverRule` `AssociateResolverRule` and if the `Records.requestParameters.resolverRuleId` log field value is not empty then, `Records.requestParameters.resolverRuleId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverRuleAssociation` and if the `Records.requestParameters.resolverRuleAssociationId` log field value is not empty then, `Records.requestParameters.resolverRuleAssociationId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListFirewallRuleGroupAssociations` and if the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResolverQueryLogConfigAssociations` then, Iterate through log field `Records.requestParameters.filters`, then If the `Records.requestParameters.filters.name` log field value is equal to `ResourceId` then, Iterate through log field `Records.requestParameters.filters.values`, then If the `index` value is equal to `0` then, `Records.requestParameters.filters.values` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.filters.values` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `GATEWAY` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateHealthCheck` and if the `Records.responseElements.location` log field value is not empty then, `Records.responseElements.location` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.healthCheckId`	`target.resource.name`	If the `Records.eventName` log field value is equal to `AssociateVPCWithHostedZone` and if the `Records.requestParameters.vPC.vPCId` log field value is not empty then, `Records.requestParameters.vPC.vPCId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ChangeTagsForResource` `ListTagsForResource` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetFirewallConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetChange` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHostedZone` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetQueryLoggingConfig` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetDNSSEC` `ListQueryLoggingConfigs` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListHostedZonesByName` `ListResourceRecordSets` `ChangeResourceRecordSets` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHealthCheck` and if the `Records.requestParameters.healthCheckId` log field value is not empty then, `Records.requestParameters.healthCheckId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFirewallDomainList` `ListFirewallDomains` and if the `Records.requestParameters.firewallDomainListId` log field value is not empty then, `Records.requestParameters.firewallDomainListId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverEndpoint` `ListResolverEndpointIpAddresses` and if the `Records.requestParameters.resolverEndpointId` log field value is not empty then, `Records.requestParameters.resolverEndpointId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverRule` `AssociateResolverRule` and if the `Records.requestParameters.resolverRuleId` log field value is not empty then, `Records.requestParameters.resolverRuleId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverRuleAssociation` and if the `Records.requestParameters.resolverRuleAssociationId` log field value is not empty then, `Records.requestParameters.resolverRuleAssociationId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListFirewallRuleGroupAssociations` and if the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResolverQueryLogConfigAssociations` then, Iterate through log field `Records.requestParameters.filters`, then If the `Records.requestParameters.filters.name` log field value is equal to `ResourceId` then, Iterate through log field `Records.requestParameters.filters.values`, then If the `index` value is equal to `0` then, `Records.requestParameters.filters.values` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.filters.values` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `GATEWAY` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateHealthCheck` and if the `Records.responseElements.location` log field value is not empty then, `Records.responseElements.location` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.firewallDomainListId`	`target.resource.name`	If the `Records.eventName` log field value is equal to `AssociateVPCWithHostedZone` and if the `Records.requestParameters.vPC.vPCId` log field value is not empty then, `Records.requestParameters.vPC.vPCId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ChangeTagsForResource` `ListTagsForResource` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetFirewallConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetChange` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHostedZone` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetQueryLoggingConfig` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetDNSSEC` `ListQueryLoggingConfigs` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListHostedZonesByName` `ListResourceRecordSets` `ChangeResourceRecordSets` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHealthCheck` and if the `Records.requestParameters.healthCheckId` log field value is not empty then, `Records.requestParameters.healthCheckId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFirewallDomainList` `ListFirewallDomains` and if the `Records.requestParameters.firewallDomainListId` log field value is not empty then, `Records.requestParameters.firewallDomainListId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverEndpoint` `ListResolverEndpointIpAddresses` and if the `Records.requestParameters.resolverEndpointId` log field value is not empty then, `Records.requestParameters.resolverEndpointId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverRule` `AssociateResolverRule` and if the `Records.requestParameters.resolverRuleId` log field value is not empty then, `Records.requestParameters.resolverRuleId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverRuleAssociation` and if the `Records.requestParameters.resolverRuleAssociationId` log field value is not empty then, `Records.requestParameters.resolverRuleAssociationId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListFirewallRuleGroupAssociations` and if the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResolverQueryLogConfigAssociations` then, Iterate through log field `Records.requestParameters.filters`, then If the `Records.requestParameters.filters.name` log field value is equal to `ResourceId` then, Iterate through log field `Records.requestParameters.filters.values`, then If the `index` value is equal to `0` then, `Records.requestParameters.filters.values` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.filters.values` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `GATEWAY` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateHealthCheck` and if the `Records.responseElements.location` log field value is not empty then, `Records.responseElements.location` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.resolverEndpointId`	`target.resource.name`	If the `Records.eventName` log field value is equal to `AssociateVPCWithHostedZone` and if the `Records.requestParameters.vPC.vPCId` log field value is not empty then, `Records.requestParameters.vPC.vPCId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ChangeTagsForResource` `ListTagsForResource` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetFirewallConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetChange` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHostedZone` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetQueryLoggingConfig` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetDNSSEC` `ListQueryLoggingConfigs` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListHostedZonesByName` `ListResourceRecordSets` `ChangeResourceRecordSets` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHealthCheck` and if the `Records.requestParameters.healthCheckId` log field value is not empty then, `Records.requestParameters.healthCheckId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFirewallDomainList` `ListFirewallDomains` and if the `Records.requestParameters.firewallDomainListId` log field value is not empty then, `Records.requestParameters.firewallDomainListId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverEndpoint` `ListResolverEndpointIpAddresses` and if the `Records.requestParameters.resolverEndpointId` log field value is not empty then, `Records.requestParameters.resolverEndpointId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverRule` `AssociateResolverRule` and if the `Records.requestParameters.resolverRuleId` log field value is not empty then, `Records.requestParameters.resolverRuleId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverRuleAssociation` and if the `Records.requestParameters.resolverRuleAssociationId` log field value is not empty then, `Records.requestParameters.resolverRuleAssociationId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListFirewallRuleGroupAssociations` and if the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResolverQueryLogConfigAssociations` then, Iterate through log field `Records.requestParameters.filters`, then If the `Records.requestParameters.filters.name` log field value is equal to `ResourceId` then, Iterate through log field `Records.requestParameters.filters.values`, then If the `index` value is equal to `0` then, `Records.requestParameters.filters.values` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.filters.values` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `GATEWAY` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateHealthCheck` and if the `Records.responseElements.location` log field value is not empty then, `Records.responseElements.location` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.resolverRuleId`	`target.resource.name`	If the `Records.eventName` log field value is equal to `AssociateVPCWithHostedZone` and if the `Records.requestParameters.vPC.vPCId` log field value is not empty then, `Records.requestParameters.vPC.vPCId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ChangeTagsForResource` `ListTagsForResource` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetFirewallConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetChange` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHostedZone` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetQueryLoggingConfig` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetDNSSEC` `ListQueryLoggingConfigs` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListHostedZonesByName` `ListResourceRecordSets` `ChangeResourceRecordSets` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHealthCheck` and if the `Records.requestParameters.healthCheckId` log field value is not empty then, `Records.requestParameters.healthCheckId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFirewallDomainList` `ListFirewallDomains` and if the `Records.requestParameters.firewallDomainListId` log field value is not empty then, `Records.requestParameters.firewallDomainListId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverEndpoint` `ListResolverEndpointIpAddresses` and if the `Records.requestParameters.resolverEndpointId` log field value is not empty then, `Records.requestParameters.resolverEndpointId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverRule` `AssociateResolverRule` and if the `Records.requestParameters.resolverRuleId` log field value is not empty then, `Records.requestParameters.resolverRuleId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverRuleAssociation` and if the `Records.requestParameters.resolverRuleAssociationId` log field value is not empty then, `Records.requestParameters.resolverRuleAssociationId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListFirewallRuleGroupAssociations` and if the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResolverQueryLogConfigAssociations` then, Iterate through log field `Records.requestParameters.filters`, then If the `Records.requestParameters.filters.name` log field value is equal to `ResourceId` then, Iterate through log field `Records.requestParameters.filters.values`, then If the `index` value is equal to `0` then, `Records.requestParameters.filters.values` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.filters.values` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `GATEWAY` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateHealthCheck` and if the `Records.responseElements.location` log field value is not empty then, `Records.responseElements.location` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.resolverRuleAssociationId`	`target.resource.name`	If the `Records.eventName` log field value is equal to `AssociateVPCWithHostedZone` and if the `Records.requestParameters.vPC.vPCId` log field value is not empty then, `Records.requestParameters.vPC.vPCId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ChangeTagsForResource` `ListTagsForResource` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetFirewallConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetChange` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHostedZone` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetQueryLoggingConfig` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetDNSSEC` `ListQueryLoggingConfigs` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListHostedZonesByName` `ListResourceRecordSets` `ChangeResourceRecordSets` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHealthCheck` and if the `Records.requestParameters.healthCheckId` log field value is not empty then, `Records.requestParameters.healthCheckId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFirewallDomainList` `ListFirewallDomains` and if the `Records.requestParameters.firewallDomainListId` log field value is not empty then, `Records.requestParameters.firewallDomainListId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverEndpoint` `ListResolverEndpointIpAddresses` and if the `Records.requestParameters.resolverEndpointId` log field value is not empty then, `Records.requestParameters.resolverEndpointId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverRule` `AssociateResolverRule` and if the `Records.requestParameters.resolverRuleId` log field value is not empty then, `Records.requestParameters.resolverRuleId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverRuleAssociation` and if the `Records.requestParameters.resolverRuleAssociationId` log field value is not empty then, `Records.requestParameters.resolverRuleAssociationId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListFirewallRuleGroupAssociations` and if the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResolverQueryLogConfigAssociations` then, Iterate through log field `Records.requestParameters.filters`, then If the `Records.requestParameters.filters.name` log field value is equal to `ResourceId` then, Iterate through log field `Records.requestParameters.filters.values`, then If the `index` value is equal to `0` then, `Records.requestParameters.filters.values` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.filters.values` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `GATEWAY` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateHealthCheck` and if the `Records.responseElements.location` log field value is not empty then, `Records.responseElements.location` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.vpcId`	`target.resource.name`	If the `Records.eventName` log field value is equal to `AssociateVPCWithHostedZone` and if the `Records.requestParameters.vPC.vPCId` log field value is not empty then, `Records.requestParameters.vPC.vPCId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ChangeTagsForResource` `ListTagsForResource` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetFirewallConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetChange` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHostedZone` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetQueryLoggingConfig` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetDNSSEC` `ListQueryLoggingConfigs` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListHostedZonesByName` `ListResourceRecordSets` `ChangeResourceRecordSets` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHealthCheck` and if the `Records.requestParameters.healthCheckId` log field value is not empty then, `Records.requestParameters.healthCheckId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFirewallDomainList` `ListFirewallDomains` and if the `Records.requestParameters.firewallDomainListId` log field value is not empty then, `Records.requestParameters.firewallDomainListId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverEndpoint` `ListResolverEndpointIpAddresses` and if the `Records.requestParameters.resolverEndpointId` log field value is not empty then, `Records.requestParameters.resolverEndpointId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverRule` `AssociateResolverRule` and if the `Records.requestParameters.resolverRuleId` log field value is not empty then, `Records.requestParameters.resolverRuleId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverRuleAssociation` and if the `Records.requestParameters.resolverRuleAssociationId` log field value is not empty then, `Records.requestParameters.resolverRuleAssociationId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListFirewallRuleGroupAssociations` and if the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResolverQueryLogConfigAssociations` then, Iterate through log field `Records.requestParameters.filters`, then If the `Records.requestParameters.filters.name` log field value is equal to `ResourceId` then, Iterate through log field `Records.requestParameters.filters.values`, then If the `index` value is equal to `0` then, `Records.requestParameters.filters.values` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.filters.values` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `GATEWAY` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateHealthCheck` and if the `Records.responseElements.location` log field value is not empty then, `Records.responseElements.location` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.resourceArn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `AssociateVPCWithHostedZone` and if the `Records.requestParameters.vPC.vPCId` log field value is not empty then, `Records.requestParameters.vPC.vPCId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ChangeTagsForResource` `ListTagsForResource` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetFirewallConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetChange` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHostedZone` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetQueryLoggingConfig` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetDNSSEC` `ListQueryLoggingConfigs` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListHostedZonesByName` `ListResourceRecordSets` `ChangeResourceRecordSets` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHealthCheck` and if the `Records.requestParameters.healthCheckId` log field value is not empty then, `Records.requestParameters.healthCheckId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFirewallDomainList` `ListFirewallDomains` and if the `Records.requestParameters.firewallDomainListId` log field value is not empty then, `Records.requestParameters.firewallDomainListId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverEndpoint` `ListResolverEndpointIpAddresses` and if the `Records.requestParameters.resolverEndpointId` log field value is not empty then, `Records.requestParameters.resolverEndpointId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverRule` `AssociateResolverRule` and if the `Records.requestParameters.resolverRuleId` log field value is not empty then, `Records.requestParameters.resolverRuleId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverRuleAssociation` and if the `Records.requestParameters.resolverRuleAssociationId` log field value is not empty then, `Records.requestParameters.resolverRuleAssociationId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListFirewallRuleGroupAssociations` and if the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResolverQueryLogConfigAssociations` then, Iterate through log field `Records.requestParameters.filters`, then If the `Records.requestParameters.filters.name` log field value is equal to `ResourceId` then, Iterate through log field `Records.requestParameters.filters.values`, then If the `index` value is equal to `0` then, `Records.requestParameters.filters.values` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.filters.values` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `GATEWAY` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateHealthCheck` and if the `Records.responseElements.location` log field value is not empty then, `Records.responseElements.location` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.filters.name`	`target.resource.name`	If the `Records.eventName` log field value is equal to `AssociateVPCWithHostedZone` and if the `Records.requestParameters.vPC.vPCId` log field value is not empty then, `Records.requestParameters.vPC.vPCId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ChangeTagsForResource` `ListTagsForResource` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetFirewallConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetChange` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHostedZone` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetQueryLoggingConfig` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetDNSSEC` `ListQueryLoggingConfigs` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListHostedZonesByName` `ListResourceRecordSets` `ChangeResourceRecordSets` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHealthCheck` and if the `Records.requestParameters.healthCheckId` log field value is not empty then, `Records.requestParameters.healthCheckId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFirewallDomainList` `ListFirewallDomains` and if the `Records.requestParameters.firewallDomainListId` log field value is not empty then, `Records.requestParameters.firewallDomainListId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverEndpoint` `ListResolverEndpointIpAddresses` and if the `Records.requestParameters.resolverEndpointId` log field value is not empty then, `Records.requestParameters.resolverEndpointId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverRule` `AssociateResolverRule` and if the `Records.requestParameters.resolverRuleId` log field value is not empty then, `Records.requestParameters.resolverRuleId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverRuleAssociation` and if the `Records.requestParameters.resolverRuleAssociationId` log field value is not empty then, `Records.requestParameters.resolverRuleAssociationId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListFirewallRuleGroupAssociations` and if the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResolverQueryLogConfigAssociations` then, Iterate through log field `Records.requestParameters.filters`, then If the `Records.requestParameters.filters.name` log field value is equal to `ResourceId` then, Iterate through log field `Records.requestParameters.filters.values`, then If the `index` value is equal to `0` then, `Records.requestParameters.filters.values` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.filters.values` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `GATEWAY` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateHealthCheck` and if the `Records.responseElements.location` log field value is not empty then, `Records.responseElements.location` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.location`	`target.resource.name`	If the `Records.eventName` log field value is equal to `AssociateVPCWithHostedZone` and if the `Records.requestParameters.vPC.vPCId` log field value is not empty then, `Records.requestParameters.vPC.vPCId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ChangeTagsForResource` `ListTagsForResource` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetFirewallConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetChange` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHostedZone` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetQueryLoggingConfig` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetDNSSEC` `ListQueryLoggingConfigs` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListHostedZonesByName` `ListResourceRecordSets` `ChangeResourceRecordSets` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHealthCheck` and if the `Records.requestParameters.healthCheckId` log field value is not empty then, `Records.requestParameters.healthCheckId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFirewallDomainList` `ListFirewallDomains` and if the `Records.requestParameters.firewallDomainListId` log field value is not empty then, `Records.requestParameters.firewallDomainListId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverEndpoint` `ListResolverEndpointIpAddresses` and if the `Records.requestParameters.resolverEndpointId` log field value is not empty then, `Records.requestParameters.resolverEndpointId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverRule` `AssociateResolverRule` and if the `Records.requestParameters.resolverRuleId` log field value is not empty then, `Records.requestParameters.resolverRuleId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverRuleAssociation` and if the `Records.requestParameters.resolverRuleAssociationId` log field value is not empty then, `Records.requestParameters.resolverRuleAssociationId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListFirewallRuleGroupAssociations` and if the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResolverQueryLogConfigAssociations` then, Iterate through log field `Records.requestParameters.filters`, then If the `Records.requestParameters.filters.name` log field value is equal to `ResourceId` then, Iterate through log field `Records.requestParameters.filters.values`, then If the `index` value is equal to `0` then, `Records.requestParameters.filters.values` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.filters.values` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `GATEWAY` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateHealthCheck` and if the `Records.responseElements.location` log field value is not empty then, `Records.responseElements.location` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.filters.values`	`target.resource.name`	If the `Records.eventName` log field value is equal to `AssociateVPCWithHostedZone` and if the `Records.requestParameters.vPC.vPCId` log field value is not empty then, `Records.requestParameters.vPC.vPCId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ChangeTagsForResource` `ListTagsForResource` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetFirewallConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverConfig` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetChange` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHostedZone` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetQueryLoggingConfig` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetDNSSEC` `ListQueryLoggingConfigs` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListHostedZonesByName` `ListResourceRecordSets` `ChangeResourceRecordSets` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetHealthCheck` and if the `Records.requestParameters.healthCheckId` log field value is not empty then, `Records.requestParameters.healthCheckId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFirewallDomainList` `ListFirewallDomains` and if the `Records.requestParameters.firewallDomainListId` log field value is not empty then, `Records.requestParameters.firewallDomainListId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverEndpoint` `ListResolverEndpointIpAddresses` and if the `Records.requestParameters.resolverEndpointId` log field value is not empty then, `Records.requestParameters.resolverEndpointId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetResolverRule` `AssociateResolverRule` and if the `Records.requestParameters.resolverRuleId` log field value is not empty then, `Records.requestParameters.resolverRuleId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetResolverRuleAssociation` and if the `Records.requestParameters.resolverRuleAssociationId` log field value is not empty then, `Records.requestParameters.resolverRuleAssociationId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListFirewallRuleGroupAssociations` and if the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResolverQueryLogConfigAssociations` then, Iterate through log field `Records.requestParameters.filters`, then If the `Records.requestParameters.filters.name` log field value is equal to `ResourceId` then, Iterate through log field `Records.requestParameters.filters.values`, then If the `index` value is equal to `0` then, `Records.requestParameters.filters.values` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `GATEWAY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.filters.values` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `GATEWAY` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateHealthCheck` and if the `Records.responseElements.location` log field value is not empty then, `Records.responseElements.location` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.vPC.vPCRegion`	`target.resource.attribute.cloud.availability_zone`	If the `Records.eventName` log field value is equal to `AssociateVPCWithHostedZone` then, `Records.requestParameters.vPC.vPCRegion` log field is mapped to the `target.resource.attribute.cloud.availability_zone` UDM field.
`Records.requestParameters.hostedZoneId`	`target.resource_ancestors.name`	If the `Records.eventName` log field value is equal to `AssociateVPCWithHostedZone` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `DATASET` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssociateResolverRule` and if the `Records.requestParameters.vPCId` log field value is not empty then, `Records.requestParameters.vPCId` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.vPCId`	`target.resource_ancestors.name`	If the `Records.eventName` log field value is equal to `AssociateVPCWithHostedZone` and if the `Records.requestParameters.hostedZoneId` log field value is not empty then, `Records.requestParameters.hostedZoneId` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `DATASET` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssociateResolverRule` and if the `Records.requestParameters.vPCId` log field value is not empty then, `Records.requestParameters.vPCId` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.changeInfo.submittedAt`	`target.resource.attribute.last_update_time`	If the `Records.eventName` log field value contain one of the following values `AssociateVPCWithHostedZone` `ChangeResourceRecordSets` then, `Records.responseElements.changeInfo.submittedAt` log field is mapped to the `target.resource.attribute.last_update_time` UDM field.
`Records.responseElements.changeInfo.id`	`target.resource.attribute.labels[res_change_info_id]`
`Records.responseElements.changeInfo.comment`	`target.resource.attribute.labels[res_change_info_comment]`
`Records.responseElements.changeInfo.status`	`target.resource.attribute.labels[res_change_info_status]`
`Records.requestParameters.addTags.key`	`target.resource.attribute.labels[req_tags_key]`	Iterate through log field `Records.requestParameters.addTags`, then `Records.requestParameters.addTags.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.addTags.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.addTags.value`	`target.resource.attribute.labels[req_tags_key]`	Iterate through log field `Records.requestParameters.addTags`, then `Records.requestParameters.addTags.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.addTags.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.resourceType`	`target.resource.resource_subtype`
`Records.requestParameters.id`	`security_result.rule_name`	If the `Records.eventName` log field value contain one of the following values `ChangeTagsForResource` `ListTrafficPolicyVersions` then, `Records.requestParameters.id` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value is equal to `ListTrafficPolicyInstancesByPolicy` then, `Records.requestParameters.trafficPolicyId` log field is mapped to the `security_result.rule_name` UDM field.
`Records.requestParameters.trafficPolicyId`	`security_result.rule_name`	If the `Records.eventName` log field value contain one of the following values `ChangeTagsForResource` `ListTrafficPolicyVersions` then, `Records.requestParameters.id` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value is equal to `ListTrafficPolicyInstancesByPolicy` then, `Records.requestParameters.trafficPolicyId` log field is mapped to the `security_result.rule_name` UDM field.
`Records.requestParameters.version`	`security_result.rule_version`	If the `Records.eventName` log field value is equal to `ListTrafficPolicyInstancesByPolicy` then, `Records.requestParameters.trafficPolicyVersion` log field is mapped to the `security_result.rule_version` UDM field. Else, if the `Records.eventName` log field value is equal to `GetTrafficPolicy` then, `Records.requestParameters.version` log field is mapped to the `security_result.rule_version` UDM field.
`Records.requestParameters.trafficPolicyVersion`	`security_result.rule_version`	If the `Records.eventName` log field value is equal to `ListTrafficPolicyInstancesByPolicy` then, `Records.requestParameters.trafficPolicyVersion` log field is mapped to the `security_result.rule_version` UDM field. Else, if the `Records.eventName` log field value is equal to `GetTrafficPolicy` then, `Records.requestParameters.version` log field is mapped to the `security_result.rule_version` UDM field.
`Records.requestParameters.maxResults`	`target.resource.attribute.labels[req_max_results]`
`Records.requestParameters.maxItems`	`target.resource.attribute.labels[req_max_items]`
`Records.requestParameters.marker`	`target.resource.attribute.labels[req_marker]`
`Records.requestParameters.dNSName`	`network.dns_domain`
`Records.requestParameters.startRecordType`	`target.resource.attribute.labels[req_start_record_type]`
`Records.requestParameters.startRecordName`	`target.resource.attribute.labels[req_start_record_name]`
`Records.requestParameters.type`	`target.resource.attribute.labels[req_type]`
`Records.requestParameters.domainNames.name`	`target.domain.name`	If the `Records.eventName` log field value contain one of the following values `CheckDomainTransferability` `GetContactReachabilityStatus` `GetDomainDetail` `GetDomainSuggestions` `UpdateDomainContact` `UpdateDomainContactPrivacy` then, `Records.requestParameters.domainName.name` log field is mapped to the `target.domain.name` UDM field. Else, if the `Records.eventName` log field value is equal to `ListTagsForDomain` then, `Records.requestParameters.domainName` log field is mapped to the `target.domain.name` UDM field. Else, if the `Records.eventName` log field value is equal to `ListPrices` then, `Records.requestParameters.tld` log field is mapped to the `target.domain.name` UDM field. Else, if the `Records.eventName` log field value is equal to `TransferDomain` then, `Records.requestParameters.domainNameInfo.domainName.name` log field is mapped to the `target.domain.name` UDM field. Else, Iterate through log field `Records.requestParameters.domainNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.domainNames.name` log field is mapped to the `target.domain.name` UDM field. Else, `Records.requestParameters.domainNames.name` log field is mapped to the `about.domain.name` UDM field.
`Records.requestParameters.domainName.name`	`target.domain.name`	If the `Records.eventName` log field value contain one of the following values `CheckDomainTransferability` `GetContactReachabilityStatus` `GetDomainDetail` `GetDomainSuggestions` `UpdateDomainContact` `UpdateDomainContactPrivacy` then, `Records.requestParameters.domainName.name` log field is mapped to the `target.domain.name` UDM field. Else, if the `Records.eventName` log field value is equal to `ListTagsForDomain` then, `Records.requestParameters.domainName` log field is mapped to the `target.domain.name` UDM field. Else, if the `Records.eventName` log field value is equal to `ListPrices` then, `Records.requestParameters.tld` log field is mapped to the `target.domain.name` UDM field. Else, if the `Records.eventName` log field value is equal to `TransferDomain` then, `Records.requestParameters.domainNameInfo.domainName.name` log field is mapped to the `target.domain.name` UDM field. Else, Iterate through log field `Records.requestParameters.domainNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.domainNames.name` log field is mapped to the `target.domain.name` UDM field. Else, `Records.requestParameters.domainNames.name` log field is mapped to the `about.domain.name` UDM field.
`Records.requestParameters.domainName`	`target.domain.name`	If the `Records.eventName` log field value contain one of the following values `CheckDomainTransferability` `GetContactReachabilityStatus` `GetDomainDetail` `GetDomainSuggestions` `UpdateDomainContact` `UpdateDomainContactPrivacy` then, `Records.requestParameters.domainName.name` log field is mapped to the `target.domain.name` UDM field. Else, if the `Records.eventName` log field value is equal to `ListTagsForDomain` then, `Records.requestParameters.domainName` log field is mapped to the `target.domain.name` UDM field. Else, if the `Records.eventName` log field value is equal to `ListPrices` then, `Records.requestParameters.tld` log field is mapped to the `target.domain.name` UDM field. Else, if the `Records.eventName` log field value is equal to `TransferDomain` then, `Records.requestParameters.domainNameInfo.domainName.name` log field is mapped to the `target.domain.name` UDM field. Else, Iterate through log field `Records.requestParameters.domainNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.domainNames.name` log field is mapped to the `target.domain.name` UDM field. Else, `Records.requestParameters.domainNames.name` log field is mapped to the `about.domain.name` UDM field.
`Records.requestParameters.domainNameInfo.domainName.name`	`target.domain.name`	If the `Records.eventName` log field value contain one of the following values `CheckDomainTransferability` `GetContactReachabilityStatus` `GetDomainDetail` `GetDomainSuggestions` `UpdateDomainContact` `UpdateDomainContactPrivacy` then, `Records.requestParameters.domainName.name` log field is mapped to the `target.domain.name` UDM field. Else, if the `Records.eventName` log field value is equal to `ListTagsForDomain` then, `Records.requestParameters.domainName` log field is mapped to the `target.domain.name` UDM field. Else, if the `Records.eventName` log field value is equal to `ListPrices` then, `Records.requestParameters.tld` log field is mapped to the `target.domain.name` UDM field. Else, if the `Records.eventName` log field value is equal to `TransferDomain` then, `Records.requestParameters.domainNameInfo.domainName.name` log field is mapped to the `target.domain.name` UDM field. Else, Iterate through log field `Records.requestParameters.domainNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.domainNames.name` log field is mapped to the `target.domain.name` UDM field. Else, `Records.requestParameters.domainNames.name` log field is mapped to the `about.domain.name` UDM field.
`Records.requestParameters.tld`	`target.domain.name`	If the `Records.eventName` log field value contain one of the following values `CheckDomainTransferability` `GetContactReachabilityStatus` `GetDomainDetail` `GetDomainSuggestions` `UpdateDomainContact` `UpdateDomainContactPrivacy` then, `Records.requestParameters.domainName.name` log field is mapped to the `target.domain.name` UDM field. Else, if the `Records.eventName` log field value is equal to `ListTagsForDomain` then, `Records.requestParameters.domainName` log field is mapped to the `target.domain.name` UDM field. Else, if the `Records.eventName` log field value is equal to `ListPrices` then, `Records.requestParameters.tld` log field is mapped to the `target.domain.name` UDM field. Else, if the `Records.eventName` log field value is equal to `TransferDomain` then, `Records.requestParameters.domainNameInfo.domainName.name` log field is mapped to the `target.domain.name` UDM field. Else, Iterate through log field `Records.requestParameters.domainNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.domainNames.name` log field is mapped to the `target.domain.name` UDM field. Else, `Records.requestParameters.domainNames.name` log field is mapped to the `about.domain.name` UDM field.
`Records.requestParameters.numSuggestions`	`target.resource.attribute.labels[req_num_suggestions]`
`Records.requestParameters.returnAvailableOnly`	`target.resource.attribute.labels[req_return_available_only]`
`Records.requestParameters.domainNameInfo.autoRenewEnabled`	`target.resource.attribute.labels[req_domain_name_info_auto_renew_enabled]`
`Records.requestParameters.domainNameInfo.ownerPrivacyProtected`	`target.resource.attribute.labels[req_domain_name_info_owner_privacy_protected]`
`Records.requestParameters.domainNameInfo.adminPrivacyProtected`	`target.resource.attribute.labels[req_domain_name_info_admin_privacy_protected]`
`Records.requestParameters.domainNameInfo.billingPrivacyProtected`	`target.resource.attribute.labels[req_domain_name_info_billing_privacy_protected]`
`Records.requestParameters.domainNameInfo.techPrivacyProtected`	`target.resource.attribute.labels[req_domain_name_info_tech_privacy_protected]`
`Records.requestParameters.durationInYears`	`target.resource.attribute.labels[req_duration_in_years]`
`Records.requestParameters.consentObject.maxPrice`	`target.resource.attribute.labels[req_consent_object_max_price]`
`Records.requestParameters.consentObject.currency`	`target.resource.attribute.labels[req_consent_object_currency]`
`Records.responseElements.requestId`	`target.resource.attribute.labels[res_request_id]`
`Records.requestParameters.enableAdminPrivacy`	`target.resource.attribute.labels[req_enable_admin_privacy]`
`Records.requestParameters.enableBillingPrivacy`	`target.resource.attribute.labels[req_enable_billing_privacy]`
`Records.requestParameters.enableOwnerPrivacy`	`target.resource.attribute.labels[req_enable_owner_privacy]`
`Records.requestParameters.enableTechPrivacy`	`target.resource.attribute.labels[req_enable_tech_privacy]`
`Records.requestParameters.filters.values`	`about.user.userid`	If the `Records.eventName` log field value is equal to `ListResolverQueryLogConfigs` then, Iterate through log field `Records.requestParameters.filters`, then If the `Records.requestParameters.filters.name` log field value is equal to `OwnerId` then, Iterate through log field `Records.requestParameters.filters.values`, then `Records.requestParameters.filters.values` log field is mapped to the `about.user.userid` UDM field.
`Records.requestParameters.sortBy`	`target.resource.attribute.labels[req_sort_by]`
`Records.requestParameters.sortOrder`	`target.resource.attribute.labels[req_sort_order]`
`Records.requestParameters.name`	`target.resource.attribute.labels[req_name]`
`Records.responseElements.resolverRuleAssociation.status`	`target.resource.attribute.labels[res_resolver_rule_association_status]`
`Records.responseElements.resolverRuleAssociation.statusMessage`	`target.resource.attribute.labels[res_resolver_rule_association_status_message]`
`Records.responseElements.resolverRuleAssociation.id`	`target.resource.attribute.labels[res_resolver_rule_association_id]`
`Records.requestParameters.sortCondition.name`	`target.resource.attribute.labels[req_sort_condition_name]`
`Records.requestParameters.sortCondition.sortOrder`	`target.resource.attribute.labels[req_sort_condition_sort_order]`
`Records.requestParameters.operationStatusList`	`target.resource.attribute.labels[req_operation_status_list]`	Iterate through log field `Records.requestParameters.operationStatusList`, then the `target.resource.attribute.labels.key` UDM field is set to `req_operation_status_list` and `Records.requestParameters.operationStatusList` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.filterConditions.name`	`target.resource.attribute.labels[req_filter_conditions_name]`	If the `Records.eventName` log field value is equal to `ListDomains` then, Iterate through log field `Records.requestParameters.filterConditions`, then the `target.resource.attribute.labels.key` UDM field is set to `req_filter_conditions_name` and `Records.requestParameters.filterConditions.name` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.filterConditions.operator`	`target.resource.attribute.labels[req_filter_conditions_operator]`	If the `Records.eventName` log field value is equal to `ListDomains` then, Iterate through log field `Records.requestParameters.filterConditions`, then the `target.resource.attribute.labels.key` UDM field is set to `req_filter_conditions_operator` and `Records.requestParameters.filterConditions.operator` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.filterConditions.values`	`target.resource.attribute.labels[req_filter_conditions_values]`	If the `Records.eventName` log field value is equal to `ListDomains` then, Iterate through log field `Records.requestParameters.filterConditions`, then Iterate through log field `Records.requestParameters.filterConditions.values`, then the `target.resource.attribute.labels.key` UDM field is set to `req_filter_conditions_values` and `Records.requestParameters.filterConditions.values` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.healthCheck.cloudWatchAlarmConfiguration.dimensions.name`	`target.resource.attribute.labels[res_health_check_cloud_watch_alarm_configuration_dimensions_name]`	If the `Records.eventName` log field value is equal to `CreateHealthCheck` then, Iterate through log field `Records.responseElements.healthCheck.cloudWatchAlarmConfiguration.dimensions`, then `Records.responseElements.healthCheck.cloudWatchAlarmConfiguration.dimensions.name` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.healthCheck.cloudWatchAlarmConfiguration.dimensions.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.healthCheck.cloudWatchAlarmConfiguration.dimensions.value`	`target.resource.attribute.labels[res_health_check_cloud_watch_alarm_configuration_dimensions_name]`	If the `Records.eventName` log field value is equal to `CreateHealthCheck` then, Iterate through log field `Records.responseElements.healthCheck.cloudWatchAlarmConfiguration.dimensions`, then `Records.responseElements.healthCheck.cloudWatchAlarmConfiguration.dimensions.name` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.healthCheck.cloudWatchAlarmConfiguration.dimensions.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.healthCheck.cloudWatchAlarmConfiguration.comparisonOperator`	`target.resource.attribute.labels[res_health_check_cloud_watch_alarm_configuration_comparison_operator]`
`Records.requestParameters.healthCheckConfig.inverted`	`target.resource.attribute.labels[req_health_check_config_inverted]`
`Records.requestParameters.healthCheckConfig.insufficientDataHealthStatus`	`target.resource.attribute.labels[req_health_check_config_insufficient_data_health_status]`
`Records.requestParameters.healthCheckConfig.alarmIdentifier.name`	`target.resource.attribute.labels[req_health_check_config_alarm_identifier_name]`
`Records.responseElements.healthCheck.cloudWatchAlarmConfiguration.evaluationPeriods`	`target.resource.attribute.labels[res_health_check_cloud_watch_alarm_configuration_evaluation_periods]`
`Records.requestParameters.healthCheckConfig.disabled`	`target.resource.attribute.labels[req_health_check_config_disabled]`
`Records.requestParameters.healthCheckConfig.type`	`target.resource.attribute.labels[req_health_check_config_type]`
`Records.requestParameters.callerReference`	`target.resource.attribute.labels[req_caller_reference]`
`Records.responseElements.healthCheck.cloudWatchAlarmConfiguration.threshold`	`target.resource.attribute.labels[res_health_check_cloud_watch_alarm_configuration_threshold]`
`Records.requestParameters.healthCheckConfig.alarmIdentifier.region`	`target.resource.attribute.labels[req_health_check_config_alarm_identifier_region]`
`Records.responseElements.healthCheck.cloudWatchAlarmConfiguration.metricName`	`target.resource.attribute.labels[res_health_check_cloud_watch_alarm_configuration_metric_name]`
`Records.responseElements.healthCheck.cloudWatchAlarmConfiguration.period`	`target.resource.attribute.labels[res_health_check_cloud_watch_alarm_configuration_period]`
`Records.responseElements.healthCheck.cloudWatchAlarmConfiguration.statistic`	`target.resource.attribute.labels[res_health_check_cloud_watch_alarm_configuration_statistic]`
`Records.responseElements.healthCheck.id`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `CreateHealthCheck` then, `Records.responseElements.healthCheck.id` log field is mapped to the `target.resource.product_object_id` UDM field.
`Records.responseElements.healthCheck.cloudWatchAlarmConfiguration.namespace`	`target.resource.attribute.labels[res_health_check_cloud_watch_alarm_configuration_namespace]`
`Records.responseElements.healthCheck.healthCheckVersion`	`target.resource.attribute.labels[res_health_check_health_check_version]`
`Records.requestParameters.changeBatch.changes.resourceRecordSet.aliasTarget.evaluateTargetHealth`	`about.resource.attribute.labels[req_alias_target_evaluate_target_health]`	If the `Records.eventName` log field value is equal to `ChangeResourceRecordSets` then, Iterate through log field `Records.requestParameters.changeBatch.changes`, then the `about.resource.attribute.labels.key` UDM field is set to `req_alias_target_evaluate_target_health` and `Records.requestParameters.changeBatch.changes.resourceRecordSet.aliasTarget.evaluateTargetHealth` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.requestParameters.changeBatch.changes.resourceRecordSet.type`	`about.resource.resource_subtype`	If the `Records.eventName` log field value is equal to `ChangeResourceRecordSets` then, Iterate through log field `Records.requestParameters.changeBatch.changes`, then `Records.requestParameters.changeBatch.changes.resourceRecordSet.type` log field is mapped to the `about.resource.resource_subtype` UDM field.
`Records.requestParameters.changeBatch.changes.resourceRecordSet.aliasTarget.dNSName`	`about.network.dns_domain`	If the `Records.eventName` log field value is equal to `ChangeResourceRecordSets` then, Iterate through log field `Records.requestParameters.changeBatch.changes`, then `Records.requestParameters.changeBatch.changes.resourceRecordSet.aliasTarget.dNSName` log field is mapped to the `about.network.dns_domain` UDM field.
`Records.requestParameters.changeBatch.changes.resourceRecordSet.aliasTarget.hostedZoneId`	`about.resource_ancestors.name`	If the `Records.eventName` log field value is equal to `ChangeResourceRecordSets` then, Iterate through log field `Records.requestParameters.changeBatch.changes`, then If the `Records.requestParameters.changeBatch.changes.resourceRecordSet.aliasTarget.hostedZoneId` log field value is not empty then, `Records.requestParameters.changeBatch.changes.resourceRecordSet.aliasTarget.hostedZoneId` log field is mapped to the `about.resource_ancestors.name` UDM field and the `about.resource_ancestors.resource_type` UDM field is set to `CLOUD_PROJECT` and the `about.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.changeBatch.changes.resourceRecordSet.tTL`	`about.resource.attribute.labels[req_t_tl]`	If the `Records.eventName` log field value is equal to `ChangeResourceRecordSets` then, Iterate through log field `Records.requestParameters.changeBatch.changes`, then the `about.resource.attribute.labels.key` UDM field is set to `req_t_tl` and `Records.requestParameters.changeBatch.changes.resourceRecordSet.tTL` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.requestParameters.changeBatch.changes.resourceRecordSet.name`	`about.resource.name`	If the `Records.eventName` log field value is equal to `ChangeResourceRecordSets` then, Iterate through log field `Records.requestParameters.changeBatch.changes`, then If the `Records.requestParameters.changeBatch.changes.resourceRecordSet.name` log field value is not empty then, the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.changeBatch.changes.resourceRecordSet.name` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `DATASET`.
`Records.requestParameters.filters.values`	`about.resource.name`	If the `Records.eventName` log field value is equal to `ChangeResourceRecordSets` then, Iterate through log field `Records.requestParameters.changeBatch.changes`, then If the `Records.requestParameters.changeBatch.changes.resourceRecordSet.name` log field value is not empty then, the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.changeBatch.changes.resourceRecordSet.name` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `DATASET`.
`Records.requestParameters.changeBatch.changes.action`	`about.resource.attribute.labels[req_change_batch_changes_action]`	If the `Records.eventName` log field value is equal to `ChangeResourceRecordSets` then, Iterate through log field `Records.requestParameters.changeBatch.changes`, then the `about.resource.attribute.labels.key` UDM field is set to `req_change_batch_changes_action` and `Records.requestParameters.changeBatch.changes.action` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.requestParameters.changeBatch.changes.resourceRecordSet.resourceRecords.name`	`about.resource.attribute.labels[req_resource_records_value]`	If the `Records.eventName` log field value is equal to `ChangeResourceRecordSets` then, Iterate through log field `Records.requestParameters.changeBatch.changes`, then Iterate through log field `Records.requestParameters.changeBatch.changes.resourceRecordSet.resourceRecords`, then `Records.requestParameters.changeBatch.changes.resourceRecordSet.resourceRecords.name` log field is mapped to the `about.resource.attribute.labels.key` UDM field and `Records.requestParameters.changeBatch.changes.resourceRecordSet.resourceRecords.value` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.requestParameters.changeBatch.changes.resourceRecordSet.resourceRecords.value`	`about.resource.attribute.labels[req_resource_records_value]`	If the `Records.eventName` log field value is equal to `ChangeResourceRecordSets` then, Iterate through log field `Records.requestParameters.changeBatch.changes`, then Iterate through log field `Records.requestParameters.changeBatch.changes.resourceRecordSet.resourceRecords`, then `Records.requestParameters.changeBatch.changes.resourceRecordSet.resourceRecords.name` log field is mapped to the `about.resource.attribute.labels.key` UDM field and `Records.requestParameters.changeBatch.changes.resourceRecordSet.resourceRecords.value` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.requestParameters.changeBatch.changes.resourceRecordSet.weight`	`about.resource.attribute.labels[req_weight]`	If the `Records.eventName` log field value is equal to `ChangeResourceRecordSets` then, Iterate through log field `Records.requestParameters.changeBatch.changes`, then the `about.resource.attribute.labels.key` UDM field is set to `req_weight` and `Records.requestParameters.changeBatch.changes.resourceRecordSet.weight` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.requestParameters.changeBatch.changes.resourceRecordSet.setIdentifier`	`about.resource.attribute.labels[req_set_identifier]`	If the `Records.eventName` log field value is equal to `ChangeResourceRecordSets` then, Iterate through log field `Records.requestParameters.changeBatch.changes`, then the `about.resource.attribute.labels.key` UDM field is set to `req_set_identifier` and `Records.requestParameters.changeBatch.changes.resourceRecordSet.setIdentifier` log field is mapped to the `about.resource.attribute.labels.value` UDM field.

Field mapping reference: AWS CloudTrail - Organizations

The following table lists the log fields for the Organizations log type and their corresponding UDM fields.

Field mapping reference: AWS CloudTrail - Config

The following table lists the log fields for the Config log type and their corresponding UDM fields.

Log field	UDM mapping	Logic
`Records.requestParameters.configRuleName`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `DeleteConfigRule` `GetComplianceDetailsByConfigRule` and if the `Records.requestParameters.configRuleName` log field value is not empty then, `Records.requestParameters.configRuleName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeConfigRuleEvaluationStatus` `DescribeConfigRules` `DescribeRemediationConfigurations` then, Iterate through log field `Records.requestParameters.configRuleName`, then If the `index` value is equal to `0` then, `Records.requestParameters.configRuleNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.configRuleNames` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `SETTING` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeConfigurationRecorderStatus` then, Iterate through log field `Records.requestParameters.configurationRecorderName`, then If the `index` value is equal to `0` then, `Records.requestParameters.configurationRecorderNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.configurationRecorderNames` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `SETTING` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters` log field value is equal to `GetResourceConfigHistory` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `BatchGetResourceConfig` then, Iterate through log field `Records.requestParameters.resourceKey`, then If the `Records.requestParameters.resourceKeys.resourceId` log field value is not empty and if the `index` value is equal to `0` then, `Records.requestParameters.resourceKeys.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.resourceKeys.resourceId` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `SETTING` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters` log field value is equal to `PutEvaluations` and if the `Records.requestParameters.evaluations.complianceResourceId` log field value is not empty then, `Records.requestParameters.evaluations.complianceResourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters` log field value is equal to `PutConfigRule` and if the `Records.requestParameters.configRule.configRuleArn` log field value is not empty then, `Records.requestParameters.configRule.configRuleArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.configRuleNames`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `DeleteConfigRule` `GetComplianceDetailsByConfigRule` and if the `Records.requestParameters.configRuleName` log field value is not empty then, `Records.requestParameters.configRuleName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeConfigRuleEvaluationStatus` `DescribeConfigRules` `DescribeRemediationConfigurations` then, Iterate through log field `Records.requestParameters.configRuleName`, then If the `index` value is equal to `0` then, `Records.requestParameters.configRuleNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.configRuleNames` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `SETTING` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeConfigurationRecorderStatus` then, Iterate through log field `Records.requestParameters.configurationRecorderName`, then If the `index` value is equal to `0` then, `Records.requestParameters.configurationRecorderNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.configurationRecorderNames` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `SETTING` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters` log field value is equal to `GetResourceConfigHistory` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `BatchGetResourceConfig` then, Iterate through log field `Records.requestParameters.resourceKey`, then If the `Records.requestParameters.resourceKeys.resourceId` log field value is not empty and if the `index` value is equal to `0` then, `Records.requestParameters.resourceKeys.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.resourceKeys.resourceId` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `SETTING` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters` log field value is equal to `PutEvaluations` and if the `Records.requestParameters.evaluations.complianceResourceId` log field value is not empty then, `Records.requestParameters.evaluations.complianceResourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters` log field value is equal to `PutConfigRule` and if the `Records.requestParameters.configRule.configRuleArn` log field value is not empty then, `Records.requestParameters.configRule.configRuleArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.configurationRecorderNames`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `DeleteConfigRule` `GetComplianceDetailsByConfigRule` and if the `Records.requestParameters.configRuleName` log field value is not empty then, `Records.requestParameters.configRuleName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeConfigRuleEvaluationStatus` `DescribeConfigRules` `DescribeRemediationConfigurations` then, Iterate through log field `Records.requestParameters.configRuleName`, then If the `index` value is equal to `0` then, `Records.requestParameters.configRuleNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.configRuleNames` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `SETTING` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeConfigurationRecorderStatus` then, Iterate through log field `Records.requestParameters.configurationRecorderName`, then If the `index` value is equal to `0` then, `Records.requestParameters.configurationRecorderNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.configurationRecorderNames` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `SETTING` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters` log field value is equal to `GetResourceConfigHistory` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `BatchGetResourceConfig` then, Iterate through log field `Records.requestParameters.resourceKey`, then If the `Records.requestParameters.resourceKeys.resourceId` log field value is not empty and if the `index` value is equal to `0` then, `Records.requestParameters.resourceKeys.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.resourceKeys.resourceId` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `SETTING` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters` log field value is equal to `PutEvaluations` and if the `Records.requestParameters.evaluations.complianceResourceId` log field value is not empty then, `Records.requestParameters.evaluations.complianceResourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters` log field value is equal to `PutConfigRule` and if the `Records.requestParameters.configRule.configRuleArn` log field value is not empty then, `Records.requestParameters.configRule.configRuleArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.resourceId`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `DeleteConfigRule` `GetComplianceDetailsByConfigRule` and if the `Records.requestParameters.configRuleName` log field value is not empty then, `Records.requestParameters.configRuleName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeConfigRuleEvaluationStatus` `DescribeConfigRules` `DescribeRemediationConfigurations` then, Iterate through log field `Records.requestParameters.configRuleName`, then If the `index` value is equal to `0` then, `Records.requestParameters.configRuleNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.configRuleNames` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `SETTING` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeConfigurationRecorderStatus` then, Iterate through log field `Records.requestParameters.configurationRecorderName`, then If the `index` value is equal to `0` then, `Records.requestParameters.configurationRecorderNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.configurationRecorderNames` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `SETTING` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters` log field value is equal to `GetResourceConfigHistory` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `BatchGetResourceConfig` then, Iterate through log field `Records.requestParameters.resourceKey`, then If the `Records.requestParameters.resourceKeys.resourceId` log field value is not empty and if the `index` value is equal to `0` then, `Records.requestParameters.resourceKeys.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.resourceKeys.resourceId` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `SETTING` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters` log field value is equal to `PutEvaluations` and if the `Records.requestParameters.evaluations.complianceResourceId` log field value is not empty then, `Records.requestParameters.evaluations.complianceResourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters` log field value is equal to `PutConfigRule` and if the `Records.requestParameters.configRule.configRuleArn` log field value is not empty then, `Records.requestParameters.configRule.configRuleArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.resourceKeys.resourceId`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `DeleteConfigRule` `GetComplianceDetailsByConfigRule` and if the `Records.requestParameters.configRuleName` log field value is not empty then, `Records.requestParameters.configRuleName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeConfigRuleEvaluationStatus` `DescribeConfigRules` `DescribeRemediationConfigurations` then, Iterate through log field `Records.requestParameters.configRuleName`, then If the `index` value is equal to `0` then, `Records.requestParameters.configRuleNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.configRuleNames` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `SETTING` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeConfigurationRecorderStatus` then, Iterate through log field `Records.requestParameters.configurationRecorderName`, then If the `index` value is equal to `0` then, `Records.requestParameters.configurationRecorderNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.configurationRecorderNames` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `SETTING` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters` log field value is equal to `GetResourceConfigHistory` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `BatchGetResourceConfig` then, Iterate through log field `Records.requestParameters.resourceKey`, then If the `Records.requestParameters.resourceKeys.resourceId` log field value is not empty and if the `index` value is equal to `0` then, `Records.requestParameters.resourceKeys.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.resourceKeys.resourceId` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `SETTING` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters` log field value is equal to `PutEvaluations` and if the `Records.requestParameters.evaluations.complianceResourceId` log field value is not empty then, `Records.requestParameters.evaluations.complianceResourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters` log field value is equal to `PutConfigRule` and if the `Records.requestParameters.configRule.configRuleArn` log field value is not empty then, `Records.requestParameters.configRule.configRuleArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.evaluations.complianceResourceId`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `DeleteConfigRule` `GetComplianceDetailsByConfigRule` and if the `Records.requestParameters.configRuleName` log field value is not empty then, `Records.requestParameters.configRuleName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeConfigRuleEvaluationStatus` `DescribeConfigRules` `DescribeRemediationConfigurations` then, Iterate through log field `Records.requestParameters.configRuleName`, then If the `index` value is equal to `0` then, `Records.requestParameters.configRuleNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.configRuleNames` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `SETTING` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeConfigurationRecorderStatus` then, Iterate through log field `Records.requestParameters.configurationRecorderName`, then If the `index` value is equal to `0` then, `Records.requestParameters.configurationRecorderNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.configurationRecorderNames` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `SETTING` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters` log field value is equal to `GetResourceConfigHistory` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `BatchGetResourceConfig` then, Iterate through log field `Records.requestParameters.resourceKey`, then If the `Records.requestParameters.resourceKeys.resourceId` log field value is not empty and if the `index` value is equal to `0` then, `Records.requestParameters.resourceKeys.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.resourceKeys.resourceId` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `SETTING` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters` log field value is equal to `PutEvaluations` and if the `Records.requestParameters.evaluations.complianceResourceId` log field value is not empty then, `Records.requestParameters.evaluations.complianceResourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters` log field value is equal to `PutConfigRule` and if the `Records.requestParameters.configRule.configRuleArn` log field value is not empty then, `Records.requestParameters.configRule.configRuleArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.configRule.configRuleArn`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `DeleteConfigRule` `GetComplianceDetailsByConfigRule` and if the `Records.requestParameters.configRuleName` log field value is not empty then, `Records.requestParameters.configRuleName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeConfigRuleEvaluationStatus` `DescribeConfigRules` `DescribeRemediationConfigurations` then, Iterate through log field `Records.requestParameters.configRuleName`, then If the `index` value is equal to `0` then, `Records.requestParameters.configRuleNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.configRuleNames` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `SETTING` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeConfigurationRecorderStatus` then, Iterate through log field `Records.requestParameters.configurationRecorderName`, then If the `index` value is equal to `0` then, `Records.requestParameters.configurationRecorderNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.configurationRecorderNames` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `SETTING` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters` log field value is equal to `GetResourceConfigHistory` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `BatchGetResourceConfig` then, Iterate through log field `Records.requestParameters.resourceKey`, then If the `Records.requestParameters.resourceKeys.resourceId` log field value is not empty and if the `index` value is equal to `0` then, `Records.requestParameters.resourceKeys.resourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.resourceKeys.resourceId` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `SETTING` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters` log field value is equal to `PutEvaluations` and if the `Records.requestParameters.evaluations.complianceResourceId` log field value is not empty then, `Records.requestParameters.evaluations.complianceResourceId` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters` log field value is equal to `PutConfigRule` and if the `Records.requestParameters.configRule.configRuleArn` log field value is not empty then, `Records.requestParameters.configRule.configRuleArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.limit`	`target.resource.attribute.labels[req_limit]`
`Records.requestParameters.nextToken`	`target.resource.attribute.labels[req_next_token]`
`Records.requestParameters.complianceTypes`	`target.resource.attribute.labels[req_compliance_types]`	Iterate through log field `Records.requestParameters.complianceType`, then the `target.resource.attribute.labels.key` UDM field is set to `req_compliance_types` and `Records.requestParameters.complianceTypes` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.resourceType`	`target.resource.resource_subtype`	If the `Records.eventName` log field value contain one of the following values `GetResourceConfigHistory` `ListDiscoveredResources` then, `Records.requestParameters.resourceType` log field is mapped to the `target.resource.resource_subtype` UDM field. Else, if the `Records.eventName` log field value is equal to `BatchGetResourceConfig` then, Iterate through log field `Records.requestParameters.resourceKey`, then If the `index` value is equal to `0` then, `Records.requestParameters.resourceKeys.resourceType` log field is mapped to the `target.resource.resource_subtype` UDM field. Else, `Records.requestParameters.resourceKeys.resourceType` log field is mapped to the `about.resource.resource_subtype` UDM field. Else, if the `Records.eventName` log field value is equal to `PutEvaluations` then, `Records.requestParameters.evaluations.complianceResourceType` log field is mapped to the `target.resource.resource_subtype` UDM field.
`Records.requestParameters.resourceKeys.resourceType`	`target.resource.resource_subtype`	If the `Records.eventName` log field value contain one of the following values `GetResourceConfigHistory` `ListDiscoveredResources` then, `Records.requestParameters.resourceType` log field is mapped to the `target.resource.resource_subtype` UDM field. Else, if the `Records.eventName` log field value is equal to `BatchGetResourceConfig` then, Iterate through log field `Records.requestParameters.resourceKey`, then If the `index` value is equal to `0` then, `Records.requestParameters.resourceKeys.resourceType` log field is mapped to the `target.resource.resource_subtype` UDM field. Else, `Records.requestParameters.resourceKeys.resourceType` log field is mapped to the `about.resource.resource_subtype` UDM field. Else, if the `Records.eventName` log field value is equal to `PutEvaluations` then, `Records.requestParameters.evaluations.complianceResourceType` log field is mapped to the `target.resource.resource_subtype` UDM field.
`Records.requestParameters.evaluations.complianceResourceType`	`target.resource.resource_subtype`	If the `Records.eventName` log field value contain one of the following values `GetResourceConfigHistory` `ListDiscoveredResources` then, `Records.requestParameters.resourceType` log field is mapped to the `target.resource.resource_subtype` UDM field. Else, if the `Records.eventName` log field value is equal to `BatchGetResourceConfig` then, Iterate through log field `Records.requestParameters.resourceKey`, then If the `index` value is equal to `0` then, `Records.requestParameters.resourceKeys.resourceType` log field is mapped to the `target.resource.resource_subtype` UDM field. Else, `Records.requestParameters.resourceKeys.resourceType` log field is mapped to the `about.resource.resource_subtype` UDM field. Else, if the `Records.eventName` log field value is equal to `PutEvaluations` then, `Records.requestParameters.evaluations.complianceResourceType` log field is mapped to the `target.resource.resource_subtype` UDM field.
`Records.requestParameters.sortOrder`	`target.resource.attribute.labels[req_sort_order]`
`Records.requestParameters.sortBy`	`target.resource.attribute.labels[req_sort_by]`
`Records.requestParameters.expression`	`target.resource.attribute.labels[req_expression]`
`Records.requestParameters.includeDeletedResources`	`target.resource.attribute.labels[req_include_deleted_resources]`
`Records.requestParameters.resultToken`	`target.resource.attribute.labels[req_result_token]`
`Records.requestParameters.testMode`	`target.resource.attribute.labels[req_test_mode]`
`Records.requestParameters.evaluations.complianceType`	`target.resource.attribute.labels[req_evaluations_compliance_type]`	Iterate through log field `Records.requestParameters.evaluation`, then the `target.resource.attribute.labels.key` UDM field is set to `req_evaluations_compliance_type` and `Records.requestParameters.evaluations.complianceType` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.evaluations.orderingTimestamp`	`target.resource.attribute.labels[req_evaluations_ordering_timestamp]`	Iterate through log field `Records.requestParameters.evaluation`, then the `target.resource.attribute.labels.key` UDM field is set to `req_evaluations_ordering_timestamp` and `Records.requestParameters.evaluations.orderingTimestamp` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.evaluations.annotation`	`target.resource.attribute.labels[req_evaluations_annotation]`	Iterate through log field `Records.requestParameters.evaluation`, then the `target.resource.attribute.labels.key` UDM field is set to `req_evaluations_annotation` and `Records.requestParameters.evaluations.annotation` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.configRule.maximumExecutionFrequency`	`target.resource.attribute.labels[req_config_rule_maximum_execution_frequency]`
`Records.requestParameters.configRule.configRuleId`	`target.resource.product_object_id`
`Records.requestParameters.configRule.configRuleName`	`target.resource.attribute.labels[req_config_rule_config_rule_name]`
`Records.requestParameters.configRule.inputParameters`	`target.resource.attribute.labels[req_config_rule_input_parameters]`
`Records.requestParameters.configRule.configRuleState`	`target.resource.attribute.labels[req_config_rule_config_rule_state]`
`Records.requestParameters.configRule.description`	`target.resource.attribute.labels[req_config_rule_description]`
`Records.requestParameters.configRule.source.owner`	`target.resource.attribute.labels[req_config_rule_source_owner]`
`Records.requestParameters.configRule.createdBy`	`target.resource.attribute.labels[req_config_rule_created_by]`
`Records.requestParameters.configRule.source.sourceIdentifier`	`target.resource.attribute.labels[req_config_rule_source_source_identifier]`
`Records.requestParameters.configRule.scope.complianceResourceTypes`	`target.resource.attribute.labels[req_config_rule_scope_compliance_resource_types]`	Iterate through log field `Records.requestParameters.configRule.scope.complianceResourceType`, then the `target.resource.attribute.labels.key` UDM field is set to `req_config_rule_scope_compliance_resource_types` and `Records.requestParameters.configRule.scope.complianceResourceTypes` log field is mapped to the `target.resource.attribute.labels.value` UDM field.

Field mapping reference: AWS CloudTrail - Miscellaneous Services

The following table lists the log fields for the Miscellaneous Services log type and their corresponding UDM fields.

Log field	UDM mapping	Logic
`Records.responseElements.ConsoleLogin`	`security_result.severity_details`	If the `Records.eventName` log field value is equal to `ConsoleLogin` then, `Records.responseElements.ConsoleLogin` log field is mapped to the `security_result.severity_details` UDM field.
	`security_result.severity`	If the `Records.eventName` log field value is equal to `ConsoleLogin` then, the `security_result.severity` UDM field is set to `INFORMATIONAL`.
`Records.requestParameters.limit`	`target.resource.attribute.labels[req_limit]`
`Records.requestParameters.filters.key`	`target.resource.attribute.labels[records_request_parameters_filters_key]`	If the `Records.eventName` log field value is equal to `ListDocuments` then, Iterate through log field `Records.requestParameters.filters`, then Iterate through log field `Records.requestParameters.filters.values`, then `Records.requestParameters.filters.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.filters.values` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.filters.values`	`target.resource.attribute.labels[records_request_parameters_filters_key]`	If the `Records.eventName` log field value is equal to `ListDocuments` then, Iterate through log field `Records.requestParameters.filters`, then Iterate through log field `Records.requestParameters.filters.values`, then `Records.requestParameters.filters.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.filters.values` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.maxResults`	`target.resource.attribute.labels[req_max_results]`
`Records.requestParameters.target`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `GetConnectionStatus` `StartSession` and if the `Records.requestParameters.target` log field value is not empty then, `Records.requestParameters.target` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `DEVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateInstanceInformation` and if the `Records.requestParameters.agentName` log field value is not empty then, `Records.requestParameters.agentName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `DEVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateDirectory` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.agentName`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `GetConnectionStatus` `StartSession` and if the `Records.requestParameters.target` log field value is not empty then, `Records.requestParameters.target` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `DEVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateInstanceInformation` and if the `Records.requestParameters.agentName` log field value is not empty then, `Records.requestParameters.agentName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `DEVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateDirectory` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.name`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `GetConnectionStatus` `StartSession` and if the `Records.requestParameters.target` log field value is not empty then, `Records.requestParameters.target` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `DEVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateInstanceInformation` and if the `Records.requestParameters.agentName` log field value is not empty then, `Records.requestParameters.agentName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `DEVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateDirectory` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.sessionId`	`network.session_id`	If the `Records.eventName` log field value is equal to `StartSession` then, `Records.responseElements.sessionId` log field is mapped to the `network.session_id` UDM field.
`Records.responseElements.streamUrl`	`target.url`	If the `Records.eventName` log field value is equal to `StartSession` then, `Records.responseElements.streamUrl` log field is mapped to the `target.url` UDM field.
`Records.responseElements.tokenValue`	`target.resource.attribute.labels[res_token_value]`
`Records.requestParameters.platformType`	`target.platform`	If the `Records.eventName` log field value is equal to `UpdateInstanceInformation` and if the `Records.requestParameters.platformType` log field value matches the regular expression pattern `Linux` then, the `target.platform` UDM field is set to `LINUX`. Else, if the `Records.requestParameters.platformType` log field value matches the regular expression pattern `Windows` then, the `target.platform` UDM field is set to `WINDOWS`. Else, if the `Records.requestParameters.platformType` log field value matches the regular expression pattern `MacOS` then, the `target.platform` UDM field is set to `MAC`.
`Records.requestParameters.instanceId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `UpdateInstanceInformation` then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateDirectory` then, `Records.responseElements.directoryId` log field is mapped to the `target.resource.product_object_id` UDM field.
`Records.responseElements.directoryId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `UpdateInstanceInformation` then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateDirectory` then, `Records.responseElements.directoryId` log field is mapped to the `target.resource.product_object_id` UDM field.
`Records.requestParameters.agentVersion`	`target.resource.attribute.labels[req_agent_version]`	If the `Records.eventName` log field value is equal to `UpdateInstanceInformation` then, the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_agent_version` and `Records.requestParameters.agentVersion` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.type`	`target.resource.resource_subtype`	If the `Records.eventName` log field value is equal to `CreateDirectory` then, `Records.requestParameters.type` log field is mapped to the `target.resource.resource_subtype` UDM field.
`Records.requestParameters.setAsDefault`	`target.resource.attribute.labels[req_set_as_default]`
`Records.requestParameters.password`	`target.resource.attribute.labels[req_password]`
`Records.requestParameters.shortName`	`target.resource.attribute.labels[req_short_name]`
`Records.requestParameters.vpcSettings.vpcId`	`target.resource_ancestors.name`	If the `Records.eventName` log field value is equal to `CreateDirectory` and if the `Records.requestParameters.vpcSettings.vpcId` log field value is not empty then, `Records.requestParameters.vpcSettings.vpcId` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `VPC_NETWORK` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.vpcSettings.subnetIds`	`target.resource.attribute.labels[req_vpc_settings_subnet_ids]`	Iterate through log field `Records.requestParameters.vpcSettings.subnetId`, then the `target.resource.attribute.labels.key` UDM field is set to `req_vpc_settings_subnet_ids` and `Records.requestParameters.vpcSettings.subnetIds` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.maxRecords`	`target.resource.attribute.labels[req_max_records]`
`Records.requestParameters.excludeManagedAlarms`	`target.resource.attribute.labels[req_exclude_managed_alarms]`
`Records.requestParameters.excludeAutoscalingAlarms`	`target.resource.attribute.labels[req_exclude_autoscaling_alarms]`
`Records.requestParameters.dashboardBody`	`target.resource.attribute.labels[req_dashboard_body]`
`Records.requestParameters.dashboardName`	`target.resource.attribute.labels[req_dashboard_name]`
`Records.responseElements.dashboardValidationMessages.dataPath`	`target.resource.attribute.labels[res_dashboard_validation_messages_data_path]`	Iterate through log field `Records.responseElements.dashboardValidationMessage`, then the `target.resource.attribute.labels.key` UDM field is set to `res_dashboard_validation_messages_data_path` and `Records.responseElements.dashboardValidationMessages.dataPath` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.dashboardValidationMessages.message`	`target.resource.attribute.labels[res_dashboard_validation_messages_message]`	Iterate through log field `Records.responseElements.dashboardValidationMessage`, then the `target.resource.attribute.labels.key` UDM field is set to `res_dashboard_validation_messages_message` and `Records.responseElements.dashboardValidationMessages.message` log field is mapped to the `target.resource.attribute.labels.value` UDM field.

Field mapping reference: AWS CloudTrail - S3

The following table lists the log fields for the S3 log type and their corresponding UDM fields.

Log field	UDM mapping	Logic
`Records.requestParameters.Host`	`target.hostname`	If the `Records.eventName` log field value contain one of the following values `AbortMultipartUpload` `CompleteMultipartUpload` `CopyObject` `CreateBucket` `DeleteBucket` `DeleteBucketPolicy` `GetAccessGrantsInstance` `GetBucketEncryption` `CreateMultipartUpload` `DeleteObject` `DeleteObjects` `GetAccelerateConfiguration` `GetAccessPoint` `GetAccessPointPolicyStatus` `GetAccountPublicAccessBlock` `GetBucketAcl` `GetBucketAnalyticsConfiguration` `GetBucketCors` `GetBucketIntelligentTieringConfiguration` `GetBucketInventoryConfiguration` `GetBucketLifecycle` `GetBucketLocation` `GetBucketLogging` `GetBucketMetricsConfiguration` `GetBucketNotification` `GetBucketObjectLockConfiguration` `GetBucketOwnershipControls` `GetBucketPolicy` `GetBucketPolicyStatus` `GetBucketPublicAccessBlock` `GetBucketReplication` `GetBucketRequestPayment` `GetBucketTagging` `GetBucketVersioning` `GetBucketWebsite` `GetObject` `GetObjectAcl` `GetObjectLockLegalHold` `GetObjectTagging` `GetStorageLensConfiguration` `GetStorageLensConfigurationTagging` `HeadBucket` `HeadObject` `ListAccessPoints` `ListAccessPointsForObjectLambda` `ListBuckets` `ListJobs` `ListMultiRegionAccessPoints` `ListMultipartUploads` `ListObjectVersions` `ListObjects` `ListParts` `ListStorageLensConfigurations` `PreflightRequest` `PutBucketAcl` `PutBucketOwnershipControls` `PutBucketCors` `PutBucketEncryption` `PutBucketLifecycle` `PutBucketNotification` `PutBucketPolicy` `PutBucketPublicAccessBlock` `PutBucketReplication` `PutBucketTagging` `PutBucketVersioning` `PutBucketWebsite` `PutObject` `PutObjectAcl` `UploadPart` `UploadPartCopy` then, `Records.requestParameters.Host` log field is mapped to the `target.hostname` UDM field.
`Records.requestParameters.bucketName`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `AbortMultipartUpload` `CompleteMultipartUpload` `CreateBucket` `DeleteBucket` `DeleteBucketPolicy` `GetBucketEncryption` `CreateMultipartUpload` `DeleteObjects` `GetAccelerateConfiguration` `GetBucketAcl` `GetBucketAnalyticsConfiguration` `GetBucketCors` `GetBucketIntelligentTieringConfiguration` `GetBucketInventoryConfiguration` `GetBucketLifecycle` `GetBucketLocation` `GetBucketLogging` `GetBucketMetricsConfiguration` `GetBucketNotification` `GetBucketObjectLockConfiguration` `GetBucketOwnershipControls` `GetBucketPolicy` `GetBucketPolicyStatus` `GetBucketPublicAccessBlock` `GetBucketReplication` `GetBucketRequestPayment` `GetBucketTagging` `GetBucketVersioning` `GetBucketWebsite` `HeadBucket` `ListMultipartUploads` `ListParts` `PreflightRequest` `PutBucketAcl` `PutBucketOwnershipControls` `PutBucketCors` `PutBucketEncryption` `PutBucketLifecycle` `PutBucketNotification` `PutBucketPolicy` `PutBucketPublicAccessBlock` `PutBucketReplication` `PutBucketTagging` `PutBucketVersioning` `PutBucketWebsite` `PutObject` `PutObjectAcl` `UploadPart` `UploadPartCopy` and if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_BUCKET` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetBucketAcl` `GetBucketPolicy` `GetBucketPolicyStatus` `PutBucketPolicy` and if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CopyObject` and if the `Records.requestParameters.x-amz-copy-source` log field value is not empty then, `Records.requestParameters.x-amz-copy-source` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeleteObject` and if the `Records.requestParameters.key` log field value is not empty then, `Records.requestParameters.key` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetObject` `GetObjectAcl` `GetObjectLockLegalHold` `GetObjectTagging` `HeadObject` and if the `Records.requestParameters.key` log field value is not empty then, `Records.requestParameters.key` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetStorageLensDashboardDataInternal` and if the `Records.requestParameters.configurationARN` log field value is not empty then, `Records.requestParameters.configurationARN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_BUCKET` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListObjectVersions` `ListObjects` and if the `Records.requestParameters.prefix` log field value is not empty then, `Records.requestParameters.prefix` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.x-amz-copy-source`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `AbortMultipartUpload` `CompleteMultipartUpload` `CreateBucket` `DeleteBucket` `DeleteBucketPolicy` `GetBucketEncryption` `CreateMultipartUpload` `DeleteObjects` `GetAccelerateConfiguration` `GetBucketAcl` `GetBucketAnalyticsConfiguration` `GetBucketCors` `GetBucketIntelligentTieringConfiguration` `GetBucketInventoryConfiguration` `GetBucketLifecycle` `GetBucketLocation` `GetBucketLogging` `GetBucketMetricsConfiguration` `GetBucketNotification` `GetBucketObjectLockConfiguration` `GetBucketOwnershipControls` `GetBucketPolicy` `GetBucketPolicyStatus` `GetBucketPublicAccessBlock` `GetBucketReplication` `GetBucketRequestPayment` `GetBucketTagging` `GetBucketVersioning` `GetBucketWebsite` `HeadBucket` `ListMultipartUploads` `ListParts` `PreflightRequest` `PutBucketAcl` `PutBucketOwnershipControls` `PutBucketCors` `PutBucketEncryption` `PutBucketLifecycle` `PutBucketNotification` `PutBucketPolicy` `PutBucketPublicAccessBlock` `PutBucketReplication` `PutBucketTagging` `PutBucketVersioning` `PutBucketWebsite` `PutObject` `PutObjectAcl` `UploadPart` `UploadPartCopy` and if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_BUCKET` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetBucketAcl` `GetBucketPolicy` `GetBucketPolicyStatus` `PutBucketPolicy` and if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CopyObject` and if the `Records.requestParameters.x-amz-copy-source` log field value is not empty then, `Records.requestParameters.x-amz-copy-source` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeleteObject` and if the `Records.requestParameters.key` log field value is not empty then, `Records.requestParameters.key` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetObject` `GetObjectAcl` `GetObjectLockLegalHold` `GetObjectTagging` `HeadObject` and if the `Records.requestParameters.key` log field value is not empty then, `Records.requestParameters.key` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetStorageLensDashboardDataInternal` and if the `Records.requestParameters.configurationARN` log field value is not empty then, `Records.requestParameters.configurationARN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_BUCKET` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListObjectVersions` `ListObjects` and if the `Records.requestParameters.prefix` log field value is not empty then, `Records.requestParameters.prefix` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.key`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `AbortMultipartUpload` `CompleteMultipartUpload` `CreateBucket` `DeleteBucket` `DeleteBucketPolicy` `GetBucketEncryption` `CreateMultipartUpload` `DeleteObjects` `GetAccelerateConfiguration` `GetBucketAcl` `GetBucketAnalyticsConfiguration` `GetBucketCors` `GetBucketIntelligentTieringConfiguration` `GetBucketInventoryConfiguration` `GetBucketLifecycle` `GetBucketLocation` `GetBucketLogging` `GetBucketMetricsConfiguration` `GetBucketNotification` `GetBucketObjectLockConfiguration` `GetBucketOwnershipControls` `GetBucketPolicy` `GetBucketPolicyStatus` `GetBucketPublicAccessBlock` `GetBucketReplication` `GetBucketRequestPayment` `GetBucketTagging` `GetBucketVersioning` `GetBucketWebsite` `HeadBucket` `ListMultipartUploads` `ListParts` `PreflightRequest` `PutBucketAcl` `PutBucketOwnershipControls` `PutBucketCors` `PutBucketEncryption` `PutBucketLifecycle` `PutBucketNotification` `PutBucketPolicy` `PutBucketPublicAccessBlock` `PutBucketReplication` `PutBucketTagging` `PutBucketVersioning` `PutBucketWebsite` `PutObject` `PutObjectAcl` `UploadPart` `UploadPartCopy` and if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_BUCKET` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetBucketAcl` `GetBucketPolicy` `GetBucketPolicyStatus` `PutBucketPolicy` and if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CopyObject` and if the `Records.requestParameters.x-amz-copy-source` log field value is not empty then, `Records.requestParameters.x-amz-copy-source` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeleteObject` and if the `Records.requestParameters.key` log field value is not empty then, `Records.requestParameters.key` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetObject` `GetObjectAcl` `GetObjectLockLegalHold` `GetObjectTagging` `HeadObject` and if the `Records.requestParameters.key` log field value is not empty then, `Records.requestParameters.key` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetStorageLensDashboardDataInternal` and if the `Records.requestParameters.configurationARN` log field value is not empty then, `Records.requestParameters.configurationARN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_BUCKET` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListObjectVersions` `ListObjects` and if the `Records.requestParameters.prefix` log field value is not empty then, `Records.requestParameters.prefix` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.configurationARN`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `AbortMultipartUpload` `CompleteMultipartUpload` `CreateBucket` `DeleteBucket` `DeleteBucketPolicy` `GetBucketEncryption` `CreateMultipartUpload` `DeleteObjects` `GetAccelerateConfiguration` `GetBucketAcl` `GetBucketAnalyticsConfiguration` `GetBucketCors` `GetBucketIntelligentTieringConfiguration` `GetBucketInventoryConfiguration` `GetBucketLifecycle` `GetBucketLocation` `GetBucketLogging` `GetBucketMetricsConfiguration` `GetBucketNotification` `GetBucketObjectLockConfiguration` `GetBucketOwnershipControls` `GetBucketPolicy` `GetBucketPolicyStatus` `GetBucketPublicAccessBlock` `GetBucketReplication` `GetBucketRequestPayment` `GetBucketTagging` `GetBucketVersioning` `GetBucketWebsite` `HeadBucket` `ListMultipartUploads` `ListParts` `PreflightRequest` `PutBucketAcl` `PutBucketOwnershipControls` `PutBucketCors` `PutBucketEncryption` `PutBucketLifecycle` `PutBucketNotification` `PutBucketPolicy` `PutBucketPublicAccessBlock` `PutBucketReplication` `PutBucketTagging` `PutBucketVersioning` `PutBucketWebsite` `PutObject` `PutObjectAcl` `UploadPart` `UploadPartCopy` and if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_BUCKET` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetBucketAcl` `GetBucketPolicy` `GetBucketPolicyStatus` `PutBucketPolicy` and if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CopyObject` and if the `Records.requestParameters.x-amz-copy-source` log field value is not empty then, `Records.requestParameters.x-amz-copy-source` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeleteObject` and if the `Records.requestParameters.key` log field value is not empty then, `Records.requestParameters.key` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetObject` `GetObjectAcl` `GetObjectLockLegalHold` `GetObjectTagging` `HeadObject` and if the `Records.requestParameters.key` log field value is not empty then, `Records.requestParameters.key` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetStorageLensDashboardDataInternal` and if the `Records.requestParameters.configurationARN` log field value is not empty then, `Records.requestParameters.configurationARN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_BUCKET` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListObjectVersions` `ListObjects` and if the `Records.requestParameters.prefix` log field value is not empty then, `Records.requestParameters.prefix` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.bucket`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `AbortMultipartUpload` `CompleteMultipartUpload` `CreateBucket` `DeleteBucket` `DeleteBucketPolicy` `GetBucketEncryption` `CreateMultipartUpload` `DeleteObjects` `GetAccelerateConfiguration` `GetBucketAcl` `GetBucketAnalyticsConfiguration` `GetBucketCors` `GetBucketIntelligentTieringConfiguration` `GetBucketInventoryConfiguration` `GetBucketLifecycle` `GetBucketLocation` `GetBucketLogging` `GetBucketMetricsConfiguration` `GetBucketNotification` `GetBucketObjectLockConfiguration` `GetBucketOwnershipControls` `GetBucketPolicy` `GetBucketPolicyStatus` `GetBucketPublicAccessBlock` `GetBucketReplication` `GetBucketRequestPayment` `GetBucketTagging` `GetBucketVersioning` `GetBucketWebsite` `HeadBucket` `ListMultipartUploads` `ListParts` `PreflightRequest` `PutBucketAcl` `PutBucketOwnershipControls` `PutBucketCors` `PutBucketEncryption` `PutBucketLifecycle` `PutBucketNotification` `PutBucketPolicy` `PutBucketPublicAccessBlock` `PutBucketReplication` `PutBucketTagging` `PutBucketVersioning` `PutBucketWebsite` `PutObject` `PutObjectAcl` `UploadPart` `UploadPartCopy` and if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_BUCKET` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetBucketAcl` `GetBucketPolicy` `GetBucketPolicyStatus` `PutBucketPolicy` and if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CopyObject` and if the `Records.requestParameters.x-amz-copy-source` log field value is not empty then, `Records.requestParameters.x-amz-copy-source` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeleteObject` and if the `Records.requestParameters.key` log field value is not empty then, `Records.requestParameters.key` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetObject` `GetObjectAcl` `GetObjectLockLegalHold` `GetObjectTagging` `HeadObject` and if the `Records.requestParameters.key` log field value is not empty then, `Records.requestParameters.key` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetStorageLensDashboardDataInternal` and if the `Records.requestParameters.configurationARN` log field value is not empty then, `Records.requestParameters.configurationARN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_BUCKET` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListObjectVersions` `ListObjects` and if the `Records.requestParameters.prefix` log field value is not empty then, `Records.requestParameters.prefix` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.prefix`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `AbortMultipartUpload` `CompleteMultipartUpload` `CreateBucket` `DeleteBucket` `DeleteBucketPolicy` `GetBucketEncryption` `CreateMultipartUpload` `DeleteObjects` `GetAccelerateConfiguration` `GetBucketAcl` `GetBucketAnalyticsConfiguration` `GetBucketCors` `GetBucketIntelligentTieringConfiguration` `GetBucketInventoryConfiguration` `GetBucketLifecycle` `GetBucketLocation` `GetBucketLogging` `GetBucketMetricsConfiguration` `GetBucketNotification` `GetBucketObjectLockConfiguration` `GetBucketOwnershipControls` `GetBucketPolicy` `GetBucketPolicyStatus` `GetBucketPublicAccessBlock` `GetBucketReplication` `GetBucketRequestPayment` `GetBucketTagging` `GetBucketVersioning` `GetBucketWebsite` `HeadBucket` `ListMultipartUploads` `ListParts` `PreflightRequest` `PutBucketAcl` `PutBucketOwnershipControls` `PutBucketCors` `PutBucketEncryption` `PutBucketLifecycle` `PutBucketNotification` `PutBucketPolicy` `PutBucketPublicAccessBlock` `PutBucketReplication` `PutBucketTagging` `PutBucketVersioning` `PutBucketWebsite` `PutObject` `PutObjectAcl` `UploadPart` `UploadPartCopy` and if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_BUCKET` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetBucketAcl` `GetBucketPolicy` `GetBucketPolicyStatus` `PutBucketPolicy` and if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CopyObject` and if the `Records.requestParameters.x-amz-copy-source` log field value is not empty then, `Records.requestParameters.x-amz-copy-source` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeleteObject` and if the `Records.requestParameters.key` log field value is not empty then, `Records.requestParameters.key` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetObject` `GetObjectAcl` `GetObjectLockLegalHold` `GetObjectTagging` `HeadObject` and if the `Records.requestParameters.key` log field value is not empty then, `Records.requestParameters.key` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetStorageLensDashboardDataInternal` and if the `Records.requestParameters.configurationARN` log field value is not empty then, `Records.requestParameters.configurationARN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_BUCKET` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListObjectVersions` `ListObjects` and if the `Records.requestParameters.prefix` log field value is not empty then, `Records.requestParameters.prefix` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.Host`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `AbortMultipartUpload` `CompleteMultipartUpload` `CreateBucket` `DeleteBucket` `DeleteBucketPolicy` `GetBucketEncryption` `CreateMultipartUpload` `DeleteObjects` `GetAccelerateConfiguration` `GetBucketAcl` `GetBucketAnalyticsConfiguration` `GetBucketCors` `GetBucketIntelligentTieringConfiguration` `GetBucketInventoryConfiguration` `GetBucketLifecycle` `GetBucketLocation` `GetBucketLogging` `GetBucketMetricsConfiguration` `GetBucketNotification` `GetBucketObjectLockConfiguration` `GetBucketOwnershipControls` `GetBucketPolicy` `GetBucketPolicyStatus` `GetBucketPublicAccessBlock` `GetBucketReplication` `GetBucketRequestPayment` `GetBucketTagging` `GetBucketVersioning` `GetBucketWebsite` `HeadBucket` `ListMultipartUploads` `ListParts` `PreflightRequest` `PutBucketAcl` `PutBucketOwnershipControls` `PutBucketCors` `PutBucketEncryption` `PutBucketLifecycle` `PutBucketNotification` `PutBucketPolicy` `PutBucketPublicAccessBlock` `PutBucketReplication` `PutBucketTagging` `PutBucketVersioning` `PutBucketWebsite` `PutObject` `PutObjectAcl` `UploadPart` `UploadPartCopy` and if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_BUCKET` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetBucketAcl` `GetBucketPolicy` `GetBucketPolicyStatus` `PutBucketPolicy` and if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CopyObject` and if the `Records.requestParameters.x-amz-copy-source` log field value is not empty then, `Records.requestParameters.x-amz-copy-source` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeleteObject` and if the `Records.requestParameters.key` log field value is not empty then, `Records.requestParameters.key` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetObject` `GetObjectAcl` `GetObjectLockLegalHold` `GetObjectTagging` `HeadObject` and if the `Records.requestParameters.key` log field value is not empty then, `Records.requestParameters.key` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetStorageLensDashboardDataInternal` and if the `Records.requestParameters.configurationARN` log field value is not empty then, `Records.requestParameters.configurationARN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_BUCKET` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListObjectVersions` `ListObjects` and if the `Records.requestParameters.prefix` log field value is not empty then, `Records.requestParameters.prefix` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `STORAGE_OBJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.key`	`target.resource.attribute.labels[key]`	If the `Records.eventName` log field value contain one of the following values `AbortMultipartUpload` `CompleteMultipartUpload` `CopyObject` `CreateMultipartUpload` `GetBucketLocation` `ListParts` `PreflightRequest` `PutObject` `PutObjectAcl` `UploadPart` `UploadPartCopy` then, the `target.resource.attribute.labels.key` UDM field is set to `key` and `Records.requestParameters.key` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.uploadId`	`target.resource.product_object_id`	If the `Records.eventName` log field value contain one of the following values `AbortMultipartUpload` `CompleteMultipartUpload` `ListParts` `PreflightRequest` `UploadPart` `UploadPartCopy` then, `Records.requestParameters.uploadId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyObject` then, `Records.requestParameters.x-amz-copy-source-if-match` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `GetObject` then, `Records.requestParameters.versionId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ListObjects` then, `Records.requestParameters.marker` log field is mapped to the `target.resource.product_object_id` UDM field.
`Records.requestParameters.x-amz-copy-source-if-match`	`target.resource.product_object_id`	If the `Records.eventName` log field value contain one of the following values `AbortMultipartUpload` `CompleteMultipartUpload` `ListParts` `PreflightRequest` `UploadPart` `UploadPartCopy` then, `Records.requestParameters.uploadId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyObject` then, `Records.requestParameters.x-amz-copy-source-if-match` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `GetObject` then, `Records.requestParameters.versionId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ListObjects` then, `Records.requestParameters.marker` log field is mapped to the `target.resource.product_object_id` UDM field.
`Records.requestParameters.versionId`	`target.resource.product_object_id`	If the `Records.eventName` log field value contain one of the following values `AbortMultipartUpload` `CompleteMultipartUpload` `ListParts` `PreflightRequest` `UploadPart` `UploadPartCopy` then, `Records.requestParameters.uploadId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyObject` then, `Records.requestParameters.x-amz-copy-source-if-match` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `GetObject` then, `Records.requestParameters.versionId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ListObjects` then, `Records.requestParameters.marker` log field is mapped to the `target.resource.product_object_id` UDM field.
`Records.requestParameters.marker`	`target.resource.product_object_id`	If the `Records.eventName` log field value contain one of the following values `AbortMultipartUpload` `CompleteMultipartUpload` `ListParts` `PreflightRequest` `UploadPart` `UploadPartCopy` then, `Records.requestParameters.uploadId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyObject` then, `Records.requestParameters.x-amz-copy-source-if-match` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `GetObject` then, `Records.requestParameters.versionId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ListObjects` then, `Records.requestParameters.marker` log field is mapped to the `target.resource.product_object_id` UDM field.
`Records.requestParameters.CompleteMultipartUpload.Part.PartNumber`	`target.resource.attribute.labels[part_number]`	If the `Records.eventName` log field value contain one of the following values `AbortMultipartUpload` `CompleteMultipartUpload` then, Iterate through log field `Records.requestParameters.CompleteMultipartUpload.Part`, then `partnumber - %{Records.requestParameters.CompleteMultipartUpload.Part.PartNumber}` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `etag - %{Records.requestParameters.CompleteMultipartUpload.Part.ETag}` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `PreflightRequest` `UploadPart` `UploadPartCopy` then, the `target.resource.attribute.labels.key` UDM field is set to `part_number` and `Records.requestParameters.partNumber` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CompleteMultipartUpload.Part.ETag`	`target.resource.attribute.labels[part_number]`	If the `Records.eventName` log field value contain one of the following values `AbortMultipartUpload` `CompleteMultipartUpload` then, Iterate through log field `Records.requestParameters.CompleteMultipartUpload.Part`, then `partnumber - %{Records.requestParameters.CompleteMultipartUpload.Part.PartNumber}` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `etag - %{Records.requestParameters.CompleteMultipartUpload.Part.ETag}` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `PreflightRequest` `UploadPart` `UploadPartCopy` then, the `target.resource.attribute.labels.key` UDM field is set to `part_number` and `Records.requestParameters.partNumber` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.partNumber`	`target.resource.attribute.labels[part_number]`	If the `Records.eventName` log field value contain one of the following values `AbortMultipartUpload` `CompleteMultipartUpload` then, Iterate through log field `Records.requestParameters.CompleteMultipartUpload.Part`, then `partnumber - %{Records.requestParameters.CompleteMultipartUpload.Part.PartNumber}` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `etag - %{Records.requestParameters.CompleteMultipartUpload.Part.ETag}` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `PreflightRequest` `UploadPart` `UploadPartCopy` then, the `target.resource.attribute.labels.key` UDM field is set to `part_number` and `Records.requestParameters.partNumber` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CompleteMultipartUpload.xmlns`	`target.resource.attribute.labels[req_parameters_complete_multipart_upload_xmlns]`
`Records.requestParameters.CreateBucketConfiguration.xmlns`	`target.resource.attribute.labels[req_parameters_complete_multipart_upload_xmlns]`
`Records.responseElements.x-amz-server-side-encryption`	`security_result.detection_fields[x-amz-server-side-encryption]`
`Records.requestParameters.bucketName`	`target.resource_ancestors.name`	If the `Records.eventName` log field value contain one of the following values `CopyObject` `DeleteObject` `GetObject` `GetObjectAcl` `GetObjectLockLegalHold` `GetObjectTagging` `HeadObject` and if the `Records.requestParameters.key` log field value is not empty and if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `STORAGE_BUCKET` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListObjectVersions` `ListObjects` and if the `Records.requestParameters.prefix` log field value is not empty and if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `STORAGE_BUCKET` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `PutBucketReplication` and if the `Records.requestParameters.ReplicationConfiguration.Rule.Destination.Bucket` log field value is not empty then, `Records.requestParameters.ReplicationConfiguration.Rule.Destination.Bucket` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `STORAGE_BUCKET` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.ReplicationConfiguration.Rule.Destination.Bucket`	`target.resource_ancestors.name`	If the `Records.eventName` log field value contain one of the following values `CopyObject` `DeleteObject` `GetObject` `GetObjectAcl` `GetObjectLockLegalHold` `GetObjectTagging` `HeadObject` and if the `Records.requestParameters.key` log field value is not empty and if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `STORAGE_BUCKET` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListObjectVersions` `ListObjects` and if the `Records.requestParameters.prefix` log field value is not empty and if the `Records.requestParameters.bucketName` log field value is not empty then, `Records.requestParameters.bucketName` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `STORAGE_BUCKET` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `PutBucketReplication` and if the `Records.requestParameters.ReplicationConfiguration.Rule.Destination.Bucket` log field value is not empty then, `Records.requestParameters.ReplicationConfiguration.Rule.Destination.Bucket` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `STORAGE_BUCKET` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.key`	`target.resource_ancestors.attribute.labels[key]`	If the `Records.eventName` log field value is equal to `CopyObject` then, the `target.resource_ancestors.attribute.labels.key` UDM field is set to `key` and `Records.requestParameters.key` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.requestParameters.x-amz-server-side-encryption`	`target.resource.attribute.labels[x-amz-server-side-encryption]`
`Records.requestParameters.x-amz-version-id`	`target.resource.attribute.labels[x-amz-version-id]`
`Records.requestParameters.accessControlList.x-amz-grant-full-control`	`target.resource.attribute.labels[x_amz_grant_full_control]`
`Records.responseElements.x-amz-copy-source-version-id`	`target.resource.attribute.labels[x_amz_copy_source_version_id]`
`Records.requestParameters.CreateBucketConfiguration.LocationConstraint`	`target.location.name`
`Records.requestParameters.location`	`target.location.name`
`Records.requestParameters.x-amz-acl`	`target.resource.attribute.permissions.name`
`Records.requestParameters.x-amz-object-ownership`	`target.resource.attribute.labels[x_amz_object_ownership]`
`Records.requestParameters.policy`	`security_result.detection_fields[policy]`
`Records.requestParameters.encryption`	`target.resource.attribute.labels[encryption]`
`Records.requestParameters.uploads`	`target.resource.attribute.labels[uploads]`
`Records.requestParameters.x-amz-storage-class`	`target.resource.attribute.labels[x_amz_storage_class]`
`Records.requestParameters.delete`	`target.resource.attribute.labels[delete]`
`Records.requestParameters.accelerate`	`target.resource.attribute.labels[accelerate]`
`Records.requestParameters.x-amz-request-payer`	`target.resource.attribute.labels[x_amz_request_payer]`	If the `Records.eventName` log field value contain one of the following values `GetAccelerateConfiguration` `GetBucketLocation` `GetBucketOwnershipControls` `GetBucketVersioning` `ListMultipartUploads` `PutObject` then, the `target.resource.attribute.labels.key` UDM field is set to `x_amz_request_payer` and `Records.requestParameters.x-amz-request-payer` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.acl`	`target.resource.attribute.labels[acl]`
`Records.requestParameters.analytics`	`target.resource.attribute.labels[analytics]`
`Records.requestParameters.cors`	`target.resource.attribute.labels[cors]`
`Records.requestParameters.intelligent-tiering`	`target.resource.attribute.labels[intelligent_tiering]`
`Records.requestParameters.inventory`	`target.resource.attribute.labels[inventory]`
`Records.requestParameters.lifecycle`	`target.resource.attribute.labels[lifecycle]`
`Records.requestParameters.theme`	`target.resource.attribute.labels[theme]`
`Records.requestParameters.logging`	`target.resource.attribute.labels[logging]`
`Records.requestParameters.metrics`	`target.resource.attribute.labels[metrics]`
`Records.requestParameters.notification`	`target.resource.attribute.labels[notification]`
`Records.requestParameters.object-lock`	`target.resource.attribute.labels[object_lock]`
`Records.requestParameters.ownershipControls`	`target.resource.attribute.labels[ownership_controls]`
`Records.requestParameters.policyStatus`	`target.resource.attribute.labels[policy_status]`
`Records.requestParameters.publicAccessBlock`	`target.resource.attribute.labels[public_access_block]`
`Records.requestParameters.replication`	`target.resource.attribute.labels[replication]`
`Records.requestParameters.requestPayment`	`target.resource.attribute.labels[request_payment]`
`Records.requestParameters.tagging`	`target.resource.attribute.labels[tagging]`
`Records.requestParameters.versioning`	`target.resource.attribute.labels[versioning]`
`Records.requestParameters.website`	`target.resource.attribute.labels[website]`
`Records.requestParameters.X-Amz-Algorithm`	`target.resource.attribute.labels[x_amz_algorithm]`
`Records.requestParameters.X-Amz-Date`	`target.resource.attribute.labels[x_amz_date]`
`Records.requestParameters.X-Amz-Expires`	`target.resource.attribute.labels[x_amz_expires]`
`Records.requestParameters.X-Amz-SignedHeaders`	`target.resource.attribute.labels[x_amz_signed_headers]`
`Records.requestParameters.response-content-disposition`	`target.resource.attribute.labels[response_content_disposition]`
`Records.requestParameters.x-id`	`target.resource.attribute.labels[x_id]`	If the `Records.eventName` log field value contain one of the following values `GetObject` `PreflightRequest` then, the `target.resource.attribute.labels.key` UDM field is set to `x_id` and `Records.requestParameters.x-id` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.echo-integration`	`target.resource.attribute.labels[echo_integration]`
`Records.requestParameters.legal-hold`	`target.resource.attribute.labels[legal_hold]`
`Records.requestParameters.resource`	`additional.fields[resource]`
`Records.requestParameters.maxResults`	`target.resource.attribute.labels[max_results]`	If the `Records.eventName` log field value is equal to `ListAccessPoints` then, the `target.resource.attribute.labels.key` UDM field is set to `max_results` and `Records.requestParameters.maxResults` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.maxResults`	`additional.fields[max_results]`	If the `Records.eventName` log field value contain one of the following values `ListAccessPointsForObjectLambda` `ListJobs` `ListMultiRegionAccessPoints` then, the `additional.fields.key` UDM field is set to `max_results` and `Records.requestParameters.maxResults` log field is mapped to the `additional.fields.value.string_value` UDM field.
`Records.requestParameters.x-amz-request-payer`	`additional.fields[x_amz_request_payer]`	If the `Records.eventName` log field value is equal to `ListBuckets` then, the `additional.fields.key` UDM field is set to `x_amz_request_payer` and `Records.requestParameters.x-amz-request-payer` log field is mapped to the `additional.fields.value.string_value` UDM field.
`Records.requestParameters.x-id`	`additional.fields[x_id]`	If the `Records.eventName` log field value is equal to `ListBuckets` then, the `additional.fields.key` UDM field is set to `x_id` and `Records.requestParameters.x-id` log field is mapped to the `additional.fields.value.string_value` UDM field.
`Records.requestParameters.jobStatuses`	`security_result.detection_fields[job_statuses]`	Iterate through log field `Records.requestParameters.jobStatuses`, then the `security_result.detection_fields.key` UDM field is set to `job_statuses` and `Records.requestParameters.jobStatuses` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.prefix`	`target.resource.attribute.labels[prefix]`	If the `Records.eventName` log field value is equal to `ListMultipartUploads` then, the `target.resource.attribute.labels.key` UDM field is set to `prefix` and `Records.requestParameters.prefix` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.delimiter`	`target.resource.attribute.labels[delimiter]`
`Records.requestParameters.versions`	`target.resource.attribute.labels[versions]`
`Records.requestParameters.max-keys`	`target.resource.attribute.labels[max_keys]`
`Records.requestParameters.encoding-type`	`target.resource.attribute.labels[encoding_type]`
`Records.requestParameters.fetch-owner`	`target.resource.attribute.labels[fetch_owner]`
`Records.requestParameters.list-type`	`target.resource.attribute.labels[list_type]`
`Records.requestParameters.continuation-token`	`target.resource.attribute.labels[continuation_token]`
`Records.requestParameters.AccessControlPolicy.xmlns`	`target.resource.attribute.labels[xmlns]`
`Records.requestParameters.CORSConfiguration.xmlns`	`target.resource.attribute.labels[xmlns]`
`Records.requestParameters.ServerSideEncryptionConfiguration.xmlns`	`target.resource.attribute.labels[xmlns]`
`Records.requestParameters.LifecycleConfiguration.xmlns`	`target.resource.attribute.labels[xmlns]`
`Records.requestParameters.NotificationConfiguration.xmlns`	`target.resource.attribute.labels[xmlns]`
`Records.requestParameters.OwnershipControls.xmlns`	`target.resource.attribute.labels[xmlns]`
`Records.requestParameters.PublicAccessBlockConfiguration.xmlns`	`target.resource.attribute.labels[xmlns]`
`Records.requestParameters.AccessControlPolicy.Owner.ID`	`target.user.userid`
`Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Permission`	`target.user_management_chain.attribute.permissions.name`	Iterate through log field `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant`, then If the `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Permission` log field value is equal to `READ` then, `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Permission` log field is mapped to the `target.user_management_chain.attribute.permissions.name` UDM field and the `target.user_management_chain.attribute.permissions.type` UDM field is set to `DATA_READ`. Else, if the `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Permission` log field value is equal to `READ_ACP` then, `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Permission` log field is mapped to the `target.user_management_chain.attribute.permissions.name` UDM field and the `target.user_management_chain.attribute.permissions.type` UDM field is set to `ADMIN_READ`. Else, if the `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Permission` log field value is equal to `WRITE` then, `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Permission` log field is mapped to the `target.user_management_chain.attribute.permissions.name` UDM field and the `target.user_management_chain.attribute.permissions.type` UDM field is set to `DATA_WRITE`. Else, if the `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Permission` log field value is equal to `WRITE_ACP` then, `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Permission` log field is mapped to the `target.user_management_chain.attribute.permissions.name` UDM field and the `target.user_management_chain.attribute.permissions.type` UDM field is set to `ADMIN_WRITE`. Else, if the `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Permission` log field value is equal to `FULL_CONTROL` then, `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Permission` log field is mapped to the `target.user_management_chain.attribute.permissions.name` UDM field and the `target.user_management_chain.attribute.permissions.type` UDM field is set to `DATA_READ` and `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Permission` log field is mapped to the `target.user_management_chain.attribute.permissions.name` UDM field and the `target.user_management_chain.attribute.permissions.type` UDM field is set to `ADMIN_READ` and `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Permission` log field is mapped to the `target.user_management_chain.attribute.permissions.name` UDM field and the `target.user_management_chain.attribute.permissions.type` UDM field is set to `DATA_WRITE` and `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Permission` log field is mapped to the `target.user_management_chain.attribute.permissions.name` UDM field and the `target.user_management_chain.attribute.permissions.type` UDM field is set to `ADMIN_WRITE`. Else, `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Permission` log field is mapped to the `target.user_management_chain.attribute.permissions.name` UDM field and the `target.user_management_chain.attribute.permissions.type` UDM field is set to `UNKNOWN_PERMISSION_TYPE`.
`Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Grantee.ID`	`target.user_management_chain.userid`	Iterate through log field `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant`, then `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Grantee.ID` log field is mapped to the `target.user_management_chain.userid` UDM field.
`Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Grantee.URI`	`target.user_management_chain.group_identifiers`	Iterate through log field `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant`, then `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Grantee.URI` log field is mapped to the `target.user_management_chain.group_identifiers` UDM field.
`Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Grantee.xsi:type`	`target.user_management_chain.attribute.labels[xsi_type]`	Iterate through log field `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant`, then the `target.user_management_chain.attribute.labels.key` UDM field is set to `xsi_type` and `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Grantee.xsi:type` log field is mapped to the `target.user_management_chain.attribute.labels.value` UDM field.
`Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Grantee.xmlns:xsi`	`target.user_management_chain.attribute.labels[xmlns_xsi]`	Iterate through log field `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant`, then the `target.user_management_chain.attribute.labels.key` UDM field is set to `xmlns_xsi` and `Records.requestParameters.AccessControlPolicy.AccessControlList.Grant.Grantee.xmlns:xsi` log field is mapped to the `target.user_management_chain.attribute.labels.value` UDM field.
`Records.requestParameters.CORSConfiguration.CORSRule.AllowedHeader`	`security_result.detection_fields[allowed_header]`
`Records.requestParameters.CORSConfiguration.CORSRule.AllowedOrigin`	`security_result.detection_fields[allowed_origin]`
`Records.requestParameters.CORSConfiguration.CORSRule.MaxAgeSeconds`	`security_result.detection_fields[max_age_seconds]`
`Records.requestParameters.CORSConfiguration.CORSRule.AllowedMethod`	`security_result.detection_fields[allowed_method]`	Iterate through log field `Records.requestParameters.CORSConfiguration.CORSRule.AllowedMethod`, then the `security_result.detection_fields.key` UDM field is set to `allowed_method` and `Records.requestParameters.CORSConfiguration.CORSRule.AllowedMethod` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.ServerSideEncryptionConfiguration.Rule.ApplyServerSideEncryptionByDefault.SSEAlgorithm`	`security_result.detection_fields[sse_algorithm]`
`Records.requestParameters.ServerSideEncryptionConfiguration.Rule.BucketKeyEnabled`	`security_result.detection_fields[bucket_key_enabled]`
`Records.requestParameters.ServerSideEncryptionConfiguration.Rule.ApplyServerSideEncryptionByDefault.KMSMasterKeyID`	`security_result.detection_fields[kms_master_key_id]`
`Records.requestParameters.LifecycleConfiguration.Rule.Expiration.Days`	`security_result.rule_labels[rule_expiration_days]`	If the `Records.eventName` log field value is equal to `PutBucketLifecycle` and if the `Records.requestParameters.LifecycleConfiguration.Rule.ID` log field value is not empty then, the `security_result.rule_labels.key` UDM field is set to `rule_expiration_days` and `Records.requestParameters.LifecycleConfiguration.Rule.Expiration.Days` log field is mapped to the `security_result.rule_labels.value` UDM field. Else, Iterate through log field `Records.requestParameters.LifecycleConfiguration.Rule`, then the `security_result.rule_labels.key` UDM field is set to `rule_expiration_days` and `Records.requestParameters.LifecycleConfiguration.Rule.Expiration.Days` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.LifecycleConfiguration.Rule.Filter`	`security_result.rule_labels[filter]`	If the `Records.eventName` log field value is equal to `PutBucketLifecycle` and if the `Records.requestParameters.LifecycleConfiguration.Rule.ID` log field value is not empty then, the `security_result.rule_labels.key` UDM field is set to `filter` and `Records.requestParameters.LifecycleConfiguration.Rule.Filter` log field is mapped to the `security_result.rule_labels.value` UDM field. Else, Iterate through log field `Records.requestParameters.LifecycleConfiguration.Rule`, then the `security_result.rule_labels.key` UDM field is set to `filter` and `Records.requestParameters.LifecycleConfiguration.Rule.Filter` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.LifecycleConfiguration.Rule.ID`	`security_result.rule_id`	If the `Records.eventName` log field value is equal to `PutBucketLifecycle` and if the `Records.requestParameters.LifecycleConfiguration.Rule.ID` log field value is not empty then, `Records.requestParameters.LifecycleConfiguration.Rule.ID` log field is mapped to the `security_result.rule_id` UDM field. Else, Iterate through log field `Records.requestParameters.LifecycleConfiguration.Rule`, then `Records.requestParameters.LifecycleConfiguration.Rule.ID` log field is mapped to the `security_result.rule_id` UDM field.
`Records.requestParameters.LifecycleConfiguration.Rule.NoncurrentVersionExpiration.NoncurrentDays`	`security_result.rule_labels[noncurrent_days]`	If the `Records.eventName` log field value is equal to `PutBucketLifecycle` and if the `Records.requestParameters.LifecycleConfiguration.Rule.ID` log field value is not empty then, the `security_result.rule_labels.key` UDM field is set to `noncurrent_days` and `Records.requestParameters.LifecycleConfiguration.Rule.NoncurrentVersionExpiration.NoncurrentDays` log field is mapped to the `security_result.rule_labels.value` UDM field. Else, Iterate through log field `Records.requestParameters.LifecycleConfiguration.Rule`, then the `security_result.rule_labels.key` UDM field is set to `noncurrent_days` and `Records.requestParameters.LifecycleConfiguration.Rule.NoncurrentVersionExpiration.NoncurrentDays` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.LifecycleConfiguration.Rule.NoncurrentVersionTransition.NoncurrentDays`	`security_result.rule_labels[noncurrent_days]`	If the `Records.eventName` log field value is equal to `PutBucketLifecycle` and if the `Records.requestParameters.LifecycleConfiguration.Rule.ID` log field value is not empty then, the `security_result.rule_labels.key` UDM field is set to `noncurrent_days` and `Records.requestParameters.LifecycleConfiguration.Rule.NoncurrentVersionExpiration.NoncurrentDays` log field is mapped to the `security_result.rule_labels.value` UDM field. Else, Iterate through log field `Records.requestParameters.LifecycleConfiguration.Rule`, then the `security_result.rule_labels.key` UDM field is set to `noncurrent_days` and `Records.requestParameters.LifecycleConfiguration.Rule.NoncurrentVersionExpiration.NoncurrentDays` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.LifecycleConfiguration.Rule.Status`	`security_result.rule_labels[status]`	If the `Records.eventName` log field value is equal to `PutBucketLifecycle` and if the `Records.requestParameters.LifecycleConfiguration.Rule.ID` log field value is not empty then, the `security_result.rule_labels.key` UDM field is set to `Status` and `Records.requestParameters.LifecycleConfiguration.Rule.Status` log field is mapped to the `security_result.rule_labels.value` UDM field. Else, Iterate through log field `Records.requestParameters.LifecycleConfiguration.Rule`, then the `security_result.rule_labels.key` UDM field is set to `Status` and `Records.requestParameters.LifecycleConfiguration.Rule.Status` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.LifecycleConfiguration.Rule.AbortIncompleteMultipartUpload.DaysAfterInitiation`	`security_result.rule_labels[days_after_initiation]`	If the `Records.eventName` log field value is equal to `PutBucketLifecycle` and if the `Records.requestParameters.LifecycleConfiguration.Rule.ID` log field value is not empty then, the `security_result.rule_labels.key` UDM field is set to `days_after_initiation` and `Records.requestParameters.LifecycleConfiguration.Rule.AbortIncompleteMultipartUpload.DaysAfterInitiation` log field is mapped to the `security_result.rule_labels.value` UDM field. Else, Iterate through log field `Records.requestParameters.LifecycleConfiguration.Rule.ID`, then the `security_result.rule_labels.key` UDM field is set to `days_after_initiation` and `Records.requestParameters.LifecycleConfiguration.Rule.AbortIncompleteMultipartUpload.DaysAfterInitiation` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.LifecycleConfiguration.Rule.Expiration.ExpiredObjectDeleteMarker`	`security_result.rule_labels[expired_object_delete_marker]`	If the `Records.eventName` log field value is equal to `PutBucketLifecycle` and if the `Records.requestParameters.LifecycleConfiguration.Rule.ID` log field value is not empty then, the `security_result.rule_labels.key` UDM field is set to `expired_object_delete_marker` and `Records.requestParameters.LifecycleConfiguration.Rule.Expiration.ExpiredObjectDeleteMarker` log field is mapped to the `security_result.rule_labels.value` UDM field. Else, Iterate through log field `Records.requestParameters.LifecycleConfiguration.Rule`, then the `security_result.rule_labels.key` UDM field is set to `expired_object_delete_marker` and `Records.requestParameters.LifecycleConfiguration.Rule.Expiration.ExpiredObjectDeleteMarker` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.LifecycleConfiguration.Rule.Filter.Prefix`	`security_result.rule_labels[filter_prefix]`	If the `Records.eventName` log field value is equal to `PutBucketLifecycle` and if the `Records.requestParameters.LifecycleConfiguration.Rule.ID` log field value is not empty then, the `security_result.rule_labels.key` UDM field is set to `filter_prefix` and `Records.requestParameters.LifecycleConfiguration.Rule.Filter.Prefix` log field is mapped to the `security_result.rule_labels.value` UDM field. Else, Iterate through log field `Records.requestParameters.LifecycleConfiguration.Rule`, then the `security_result.rule_labels.key` UDM field is set to `filter_prefix` and `Records.requestParameters.LifecycleConfiguration.Rule.Filter.Prefix` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.LifecycleConfiguration.Rule.Transition.Days`	`security_result.rule_labels[transition_days]`	If the `Records.eventName` log field value is equal to `PutBucketLifecycle` and if the `Records.requestParameters.LifecycleConfiguration.Rule.ID` log field value is not empty then, the `security_result.rule_labels.key` UDM field is set to `transition_days` and `Records.requestParameters.LifecycleConfiguration.Rule.Transition.Days` log field is mapped to the `security_result.rule_labels.value` UDM field. Else, Iterate through log field `Records.requestParameters.LifecycleConfiguration.Rule`, then the `security_result.rule_labels.key` UDM field is set to `transition_days` and `Records.requestParameters.LifecycleConfiguration.Rule.Transition.Days` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.LifecycleConfiguration.Rule.Transition.StorageClass`	`security_result.rule_labels[storage_class]`	If the `Records.eventName` log field value is equal to `PutBucketLifecycle` and if the `Records.requestParameters.LifecycleConfiguration.Rule.ID` log field value is not empty then, the `security_result.rule_labels.key` UDM field is set to `storage_class` and `Records.requestParameters.LifecycleConfiguration.Rule.Transition.StorageClass` log field is mapped to the `security_result.rule_labels.value` UDM field and the `security_result.rule_labels.key` UDM field is set to `storage_class` and `Records.requestParameters.LifecycleConfiguration.Rule.NoncurrentVersionTransition.StorageClass` log field is mapped to the `security_result.rule_labels.value` UDM field. Else, Iterate through log field `Records.requestParameters.LifecycleConfiguration.Rule`, then the `security_result.rule_labels.key` UDM field is set to `storage_class` and `Records.requestParameters.LifecycleConfiguration.Rule.Transition.StorageClass` log field is mapped to the `security_result.rule_labels.value` UDM field and the `security_result.rule_labels.key` UDM field is set to `storage_class` and `Records.requestParameters.LifecycleConfiguration.Rule.NoncurrentVersionTransition.StorageClass` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.LifecycleConfiguration.Rule.NoncurrentVersionTransition.StorageClass`	`security_result.rule_labels[storage_class]`	If the `Records.eventName` log field value is equal to `PutBucketLifecycle` and if the `Records.requestParameters.LifecycleConfiguration.Rule.ID` log field value is not empty then, the `security_result.rule_labels.key` UDM field is set to `storage_class` and `Records.requestParameters.LifecycleConfiguration.Rule.Transition.StorageClass` log field is mapped to the `security_result.rule_labels.value` UDM field and the `security_result.rule_labels.key` UDM field is set to `storage_class` and `Records.requestParameters.LifecycleConfiguration.Rule.NoncurrentVersionTransition.StorageClass` log field is mapped to the `security_result.rule_labels.value` UDM field. Else, Iterate through log field `Records.requestParameters.LifecycleConfiguration.Rule`, then the `security_result.rule_labels.key` UDM field is set to `storage_class` and `Records.requestParameters.LifecycleConfiguration.Rule.Transition.StorageClass` log field is mapped to the `security_result.rule_labels.value` UDM field and the `security_result.rule_labels.key` UDM field is set to `storage_class` and `Records.requestParameters.LifecycleConfiguration.Rule.NoncurrentVersionTransition.StorageClass` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.LifecycleConfiguration.Rule.Prefix`	`security_result.rule_labels[prefix]`	If the `Records.eventName` log field value is equal to `PutBucketLifecycle` and if the `Records.requestParameters.LifecycleConfiguration.Rule.ID` log field value is not empty then, the `security_result.rule_labels.key` UDM field is set to `prefix` and `Records.requestParameters.LifecycleConfiguration.Rule.Prefix` log field is mapped to the `security_result.rule_labels.value` UDM field. Else, Iterate through log field `Records.requestParameters.LifecycleConfiguration.Rule`, then the `security_result.rule_labels.key` UDM field is set to `prefix` and `Records.requestParameters.LifecycleConfiguration.Rule.Prefix` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.NotificationConfiguration.QueueConfiguration.Event`	`security_result.detection_fields[event]`	If the `Records.eventName` log field value is equal to `PutBucketNotification` and if the `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Event` log field value is not empty then, the `security_result.detection_fields.key` UDM field is set to `event` and `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Event` log field is mapped to the `security_result.detection_fields.value` UDM field. Else, Iterate through log field `Records.requestParameters.NotificationConfiguration.QueueConfiguration`, then the `security_result.detection_fields.key` UDM field is set to `event` and `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Event` log field is mapped to the `security_result.detection_fields.value` UDM field.If the `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Event` log field value is not empty then, the `security_result.detection_fields.key` UDM field is set to `event` and `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Event` log field is mapped to the `security_result.detection_fields.value` UDM field. Else, Iterate through log field `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration`, then the `security_result.detection_fields.key` UDM field is set to `event` and `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Event` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Event`	`security_result.detection_fields[event]`	If the `Records.eventName` log field value is equal to `PutBucketNotification` and if the `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Event` log field value is not empty then, the `security_result.detection_fields.key` UDM field is set to `event` and `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Event` log field is mapped to the `security_result.detection_fields.value` UDM field. Else, Iterate through log field `Records.requestParameters.NotificationConfiguration.QueueConfiguration`, then the `security_result.detection_fields.key` UDM field is set to `event` and `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Event` log field is mapped to the `security_result.detection_fields.value` UDM field.If the `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Event` log field value is not empty then, the `security_result.detection_fields.key` UDM field is set to `event` and `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Event` log field is mapped to the `security_result.detection_fields.value` UDM field. Else, Iterate through log field `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration`, then the `security_result.detection_fields.key` UDM field is set to `event` and `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Event` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.NotificationConfiguration.QueueConfiguration.Id`	`security_result.detection_fields[id]`	If the `Records.eventName` log field value is equal to `PutBucketNotification` and if the `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Event` log field value is not empty then, the `security_result.detection_fields.key` UDM field is set to `id` and `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Id` log field is mapped to the `security_result.detection_fields.value` UDM field. Else, Iterate through log field `Records.requestParameters.NotificationConfiguration.QueueConfiguration`, then the `security_result.detection_fields.key` UDM field is set to `id` and `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Id` log field is mapped to the `security_result.detection_fields.value` UDM field.If the `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Event` log field value is not empty then, the `security_result.detection_fields.key` UDM field is set to `id` and `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Id` log field is mapped to the `security_result.detection_fields.value` UDM field. Else, Iterate through log field `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration`, then the `security_result.detection_fields.key` UDM field is set to `id` and `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Id` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Id`	`security_result.detection_fields[id]`	If the `Records.eventName` log field value is equal to `PutBucketNotification` and if the `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Event` log field value is not empty then, the `security_result.detection_fields.key` UDM field is set to `id` and `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Id` log field is mapped to the `security_result.detection_fields.value` UDM field. Else, Iterate through log field `Records.requestParameters.NotificationConfiguration.QueueConfiguration`, then the `security_result.detection_fields.key` UDM field is set to `id` and `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Id` log field is mapped to the `security_result.detection_fields.value` UDM field.If the `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Event` log field value is not empty then, the `security_result.detection_fields.key` UDM field is set to `id` and `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Id` log field is mapped to the `security_result.detection_fields.value` UDM field. Else, Iterate through log field `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration`, then the `security_result.detection_fields.key` UDM field is set to `id` and `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Id` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.NotificationConfiguration.QueueConfiguration.Queue`	`security_result.detection_fields[queue]`	If the `Records.eventName` log field value is equal to `PutBucketNotification` and if the `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Event` log field value is not empty then, the `security_result.detection_fields.key` UDM field is set to `queue` and `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Queue` log field is mapped to the `security_result.detection_fields.value` UDM field. Else, Iterate through log field `Records.requestParameters.NotificationConfiguration.QueueConfiguration`, then the `security_result.detection_fields.key` UDM field is set to `queue` and `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Queue` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Name`	`security_result.detection_fields[key]`	If the `Records.eventName` log field value is equal to `PutBucketNotification` and if the `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Event` log field value is not empty then, Iterate through log field `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule`, then `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Name` log field is mapped to the `security_result.detection_fields.key` UDM field and `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Value` log field is mapped to the `security_result.detection_fields.value` UDM field. Else, Iterate through log field `Records.requestParameters.NotificationConfiguration.QueueConfiguration`, then Iterate through log field `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule`, then `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Name` log field is mapped to the `security_result.detection_fields.key` UDM field and `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Value` log field is mapped to the `security_result.detection_fields.value` UDM field.If the `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Event` log field value is not empty then, Iterate through log field `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule`, then `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule.Name` log field is mapped to the `security_result.detection_fields.key` UDM field and `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule.Value` log field is mapped to the `security_result.detection_fields.value` UDM field. Else, Iterate through log field `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration`, then Iterate through log field `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule`, then `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule.Name` log field is mapped to the `security_result.detection_fields.key` UDM field and `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule.Value` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Value`	`security_result.detection_fields[key]`	If the `Records.eventName` log field value is equal to `PutBucketNotification` and if the `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Event` log field value is not empty then, Iterate through log field `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule`, then `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Name` log field is mapped to the `security_result.detection_fields.key` UDM field and `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Value` log field is mapped to the `security_result.detection_fields.value` UDM field. Else, Iterate through log field `Records.requestParameters.NotificationConfiguration.QueueConfiguration`, then Iterate through log field `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule`, then `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Name` log field is mapped to the `security_result.detection_fields.key` UDM field and `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Value` log field is mapped to the `security_result.detection_fields.value` UDM field.If the `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Event` log field value is not empty then, Iterate through log field `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule`, then `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule.Name` log field is mapped to the `security_result.detection_fields.key` UDM field and `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule.Value` log field is mapped to the `security_result.detection_fields.value` UDM field. Else, Iterate through log field `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration`, then Iterate through log field `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule`, then `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule.Name` log field is mapped to the `security_result.detection_fields.key` UDM field and `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule.Value` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule.Name`	`security_result.detection_fields[key]`	If the `Records.eventName` log field value is equal to `PutBucketNotification` and if the `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Event` log field value is not empty then, Iterate through log field `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule`, then `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Name` log field is mapped to the `security_result.detection_fields.key` UDM field and `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Value` log field is mapped to the `security_result.detection_fields.value` UDM field. Else, Iterate through log field `Records.requestParameters.NotificationConfiguration.QueueConfiguration`, then Iterate through log field `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule`, then `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Name` log field is mapped to the `security_result.detection_fields.key` UDM field and `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Value` log field is mapped to the `security_result.detection_fields.value` UDM field.If the `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Event` log field value is not empty then, Iterate through log field `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule`, then `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule.Name` log field is mapped to the `security_result.detection_fields.key` UDM field and `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule.Value` log field is mapped to the `security_result.detection_fields.value` UDM field. Else, Iterate through log field `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration`, then Iterate through log field `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule`, then `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule.Name` log field is mapped to the `security_result.detection_fields.key` UDM field and `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule.Value` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule.Value`	`security_result.detection_fields[key]`	If the `Records.eventName` log field value is equal to `PutBucketNotification` and if the `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Event` log field value is not empty then, Iterate through log field `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule`, then `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Name` log field is mapped to the `security_result.detection_fields.key` UDM field and `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Value` log field is mapped to the `security_result.detection_fields.value` UDM field. Else, Iterate through log field `Records.requestParameters.NotificationConfiguration.QueueConfiguration`, then Iterate through log field `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule`, then `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Name` log field is mapped to the `security_result.detection_fields.key` UDM field and `Records.requestParameters.NotificationConfiguration.QueueConfiguration.Filter.S3Key.FilterRule.Value` log field is mapped to the `security_result.detection_fields.value` UDM field.If the `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Event` log field value is not empty then, Iterate through log field `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule`, then `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule.Name` log field is mapped to the `security_result.detection_fields.key` UDM field and `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule.Value` log field is mapped to the `security_result.detection_fields.value` UDM field. Else, Iterate through log field `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration`, then Iterate through log field `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule`, then `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule.Name` log field is mapped to the `security_result.detection_fields.key` UDM field and `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Filter.S3Key.FilterRule.Value` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.CloudFunction`	`security_result.detection_fields[cloud_function]`	If the `Records.eventName` log field value is equal to `PutBucketNotification` and if the `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.Event` log field value is not empty then, the `security_result.detection_fields.key` UDM field is set to `cloud_function` and `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.CloudFunction` log field is mapped to the `security_result.detection_fields.value` UDM field. Else, Iterate through log field `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration`, then the `security_result.detection_fields.key` UDM field is set to `cloud_function` and `Records.requestParameters.NotificationConfiguration.CloudFunctionConfiguration.CloudFunction` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.NotificationConfiguration.OwnershipControls.Rule.ObjectOwnership`	`security_result.detection_fields[object_ownership]`	The `security_result.detection_fields.key` UDM field is set to `object_ownership` and `Records.requestParameters.NotificationConfiguration.OwnershipControls.Rule.ObjectOwnership` log field is mapped to the `security_result.detection_fields.value` UDM field. Iterate through log field `Records.requestParameters.NotificationConfiguration.OwnershipControls.Rule`, then the `security_result.detection_fields.key` UDM field is set to `object_ownership` and `Records.requestParameters.NotificationConfiguration.OwnershipControls.Rule.ObjectOwnership` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.bucketPolicy.Version`	`target.resource.attribute.labels[version]`
`Records.requestParameters.bucketPolicy.Statement.Action`	`target.resource.attribute.labels[action]`	Iterate through log field `Records.requestParameters.bucketPolicy.Statement`, then the `target.resource.attribute.labels.key` UDM field is set to `action` and `Records.requestParameters.bucketPolicy.Statement.Action` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Iterate through log field `Records.requestParameters.bucketPolicy.Statement.Action`, then the `target.resource.attribute.labels.key` UDM field is set to `action` and `Records.requestParameters.bucketPolicy.Statement.Action` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.bucketPolicy.Statement.Condition.Bool.aws:SecureTransport`	`target.resource.attribute.labels[condition_bool_aws_secure_transport]`	Iterate through log field `Records.requestParameters.bucketPolicy.Statement`, then the `target.resource.attribute.labels.key` UDM field is set to `condition_bool_aws_secure_transport` and `Records.requestParameters.bucketPolicy.Statement.Condition.Bool.aws:SecureTransport` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.bucketPolicy.Statement.Effect`	`target.resource.attribute.labels[effect]`	Iterate through log field `Records.requestParameters.bucketPolicy.Statement`, then the `target.resource.attribute.labels.key` UDM field is set to `effect` and `Records.requestParameters.bucketPolicy.Statement.Effect` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.bucketPolicy.Statement.Principal.Service`	`target.resource.attribute.labels[principal_service]`	Iterate through log field `Records.requestParameters.bucketPolicy.Statement`, then the `target.resource.attribute.labels.key` UDM field is set to `principal_service` and `Records.requestParameters.bucketPolicy.Statement.Principal.Service` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.bucketPolicy.Statement.Resource`	`target.resource.attribute.labels[resource]`	Iterate through log field `Records.requestParameters.bucketPolicy.Statement`, then the `target.resource.attribute.labels.key` UDM field is set to `resource` and `Records.requestParameters.bucketPolicy.Statement.Resource` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Iterate through log field `Records.requestParameters.bucketPolicy.Statement.Resource`, then the `target.resource.attribute.labels.key` UDM field is set to `resource` and `Records.requestParameters.bucketPolicy.Statement.Resource` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.bucketPolicy.Statement.Sid`	`target.resource.attribute.labels[sid]`	Iterate through log field `Records.requestParameters.bucketPolicy.Statement`, then the `target.resource.attribute.labels.key` UDM field is set to `sid` and `Records.requestParameters.bucketPolicy.Statement.Sid` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.bucketPolicy.Statement.Condition.StringNotEquals.s3:x-amz-server-side-encryption-aws-kms-key-id`	`target.resource.attribute.labels[string_not_equals_s3_x_amz_server_side_encryption_aws_kms_key_id]`	Iterate through log field `Records.requestParameters.bucketPolicy.Statement`, then the `target.resource.attribute.labels.key` UDM field is set to `string_not_equals_s3_x_amz_server_side_encryption_aws_kms_key_id` and `Records.requestParameters.bucketPolicy.Statement.Condition.StringNotEquals.s3:x-amz-server-side-encryption-aws-kms-key-id` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.bucketPolicy.Statement.Condition.StringNotEquals.s3:x-amz-server-side-encryption`	`target.resource.attribute.labels[s3_x_amz_server_side_encryption]`	Iterate through log field `Records.requestParameters.bucketPolicy.Statement`, then the `target.resource.attribute.labels.key` UDM field is set to `s3_x_amz_server_side_encryption` and `Records.requestParameters.bucketPolicy.Statement.Condition.StringNotEquals.s3:x-amz-server-side-encryption` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.bucketPolicy.Statement.Condition.StringEquals.aws:SourceAccount`	`target.resource.attribute.labels[condition_string_equals_aws_source_account]`	Iterate through log field `Records.requestParameters.bucketPolicy.Statement`, then the `target.resource.attribute.labels.key` UDM field is set to `condition_string_equals_aws_source_account` and `Records.requestParameters.bucketPolicy.Statement.Condition.StringEquals.aws:SourceAccount` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.bucketPolicy.Statement.Condition.StringEquals.aws:SourceArn`	`target.resource.attribute.labels[condition_string_equals_source_arn]`	Iterate through log field `Records.requestParameters.bucketPolicy.Statement`, then the `target.resource.attribute.labels.key` UDM field is set to `condition_string_equals_source_arn` and `Records.requestParameters.bucketPolicy.Statement.Condition.StringEquals.aws:SourceArn` log field is mapped to the `target.resource.attribute.labels.value` UDM field and the `target.resource.attribute.labels.key` UDM field is set to `condition_string_equals_source_arn` and `Records.requestParameters.bucketPolicy.Statement.Condition.StringEquals.AWS:SourceArn` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.bucketPolicy.Statement.Condition.StringEquals.AWS:SourceArn`	`target.resource.attribute.labels[condition_string_equals_source_arn]`	Iterate through log field `Records.requestParameters.bucketPolicy.Statement`, then the `target.resource.attribute.labels.key` UDM field is set to `condition_string_equals_source_arn` and `Records.requestParameters.bucketPolicy.Statement.Condition.StringEquals.aws:SourceArn` log field is mapped to the `target.resource.attribute.labels.value` UDM field and the `target.resource.attribute.labels.key` UDM field is set to `condition_string_equals_source_arn` and `Records.requestParameters.bucketPolicy.Statement.Condition.StringEquals.AWS:SourceArn` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.bucketPolicy.Id`	`target.resource.attribute.labels[id]`
`Records.requestParameters.bucketPolicy.Statement.Principal`	`target.resource.attribute.labels[principal]`	Iterate through log field `Records.requestParameters.bucketPolicy.Statement`, then the `target.resource.attribute.labels.key` UDM field is set to `principal` and `Records.requestParameters.bucketPolicy.Statement.Principal` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.bucketPolicy.Statement.Principal.AWS`	`target.resource.attribute.labels[principal_aws]`	Iterate through log field `Records.requestParameters.bucketPolicy.Statement`, then the `target.resource.attribute.labels.key` UDM field is set to `principal_aws` and `Records.requestParameters.bucketPolicy.Statement.Principal.AWS` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.bucketPolicy.Statement.Condition.NumericLessThan.s3:TlsVersion`	`target.resource.attribute.labels[condition_numeric_less_than_s3_tls_version]`	Iterate through log field `Records.requestParameters.bucketPolicy.Statement`, then the `target.resource.attribute.labels.key` UDM field is set to `condition_numeric_less_than_s3_tls_version` and `Records.requestParameters.bucketPolicy.Statement.Condition.NumericLessThan.s3:TlsVersion` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.bucketPolicy.Statement.Condition.StringEquals.s3:x-amz-acl`	`target.resource.attribute.labels[condition_string_equals_s3_x_amz_acl]`	Iterate through log field `Records.requestParameters.bucketPolicy.Statement`, then the `target.resource.attribute.labels.key` UDM field is set to `condition_string_equals_s3_x_amz_acl` and `Records.requestParameters.bucketPolicy.Statement.Condition.StringEquals.s3:x-amz-acl` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.bucketPolicy.Statement.Principal.CanonicalUser`	`target.resource.attribute.labels[principal_canonical_user]`	Iterate through log field `Records.requestParameters.bucketPolicy.Statement`, then the `target.resource.attribute.labels.key` UDM field is set to `principal_canonical_user` and `Records.requestParameters.bucketPolicy.Statement.Principal.CanonicalUser` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.PublicAccessBlockConfiguration.BlockPublicAcls`	`target.resource.attribute.labels[req_block_public_acls]`
`Records.requestParameters.PublicAccessBlockConfiguration.BlockPublicPolicy`	`target.resource.attribute.labels[req_block_public_policy]`
`Records.requestParameters.PublicAccessBlockConfiguration.IgnorePublicAcls`	`target.resource.attribute.labels[req_ignore_public_acls]`
`Records.requestParameters.PublicAccessBlockConfiguration.RestrictPublicBuckets`	`target.resource.attribute.labels[req_restrict_public_buckets]`
`Records.requestParameters.ReplicationConfiguration.Rule.Status`	`target.resource_ancestors.attribute.labels[req_replication_configuration_rule_status]`
`Records.requestParameters.ReplicationConfiguration.Role`	`target.resource.attribute.roles.name`
`Records.requestParameters.ReplicationConfiguration.Rule.ID`	`target.resource.attribute.labels[req_replication_configuration_rule_id]`
`Records.requestParameters.ReplicationConfiguration.Rule.Destination.StorageClass`	`target.resource.attribute.labels[req_replication_configuration_rule_destination_storage_class]`
`Records.requestParameters.Tagging.TagSet.Tag.Key`	`target.resource.attribute.labels[req_tagging_tag_set_tag_key]`	`Records.requestParameters.Tagging.TagSet.Tag.Key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.Tagging.TagSet.Tag.Value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.Tagging.TagSet.Tag.Value`	`target.resource.attribute.labels[req_tagging_tag_set_tag_key]`	`Records.requestParameters.Tagging.TagSet.Tag.Key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.Tagging.TagSet.Tag.Value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.Tagging.xmlns`	`target.resource.attribute.labels[req_tagging_xmlns]`
`Records.requestParameters.VersioningConfiguration.Status`	`target.resource.attribute.labels[req_versioning_configuration_status]`
`Records.requestParameters.VersioningConfiguration.xmlns`	`target.resource.attribute.labels[req_versioning_configuration_xmlns]`
`Records.requestParameters.WebsiteConfiguration.xmlns`	`target.resource.attribute.labels[req_website_configuration_xmlns]`
`Records.requestParameters.WebsiteConfiguration.ErrorDocument.Key`	`target.resource.attribute.labels[req_website_configuration_error_document_key]`
`Records.requestParameters.WebsiteConfiguration.IndexDocument.Suffix`	`target.resource.attribute.labels[req_website_configuration_index_document_suffix]`
`Records.requestParameters.WebsiteConfiguration.RedirectAllRequestsTo.Protocol`	`network.application_protocol`	If the `Records.requestParameters.WebsiteConfiguration.RedirectAllRequestsTo.Protocol` log field value is equal to `https` then, the `network.application_protocol` UDM field is set to `HTTPS`. Else, if the `Records.requestParameters.WebsiteConfiguration.RedirectAllRequestsTo.Protocol` log field value is equal to `http` then, the `network.application_protocol` UDM field is set to `HTTP`.
`Records.requestParameters.WebsiteConfiguration.RedirectAllRequestsTo.HostName`	`about.hostname`
`Records.requestParameters.x-amz-server-side-encryption-aws-kms-key-id`	`target.resource.attribute.labels[req_x-amz-server-side-encryption-aws-kms-key-id]`
`Records.requestParameters.x-amz-server-side-encryption-context`	`target.resource.attribute.labels[req_x-amz-server-side-encryption-context]`
`Records.responseElements.x-amz-version-id`	`target.resource.attribute.labels[res_x-amz-version-id]`
`Records.responseElements.x-amz-server-side-encryption-aws-kms-key-id`	`security_result.detection_fields[res_x-amz-server-side-encryption-aws-kms-key-id]`
`Records.responseElements.x-amz-server-side-encryption-context`	`security_result.detection_fields[res_x-amz-server-side-encryption-context]`
`Records.responseElements.x-amz-expiration`	`target.resource.attribute.labels[res_x-amz-expiration]`
`Records.requestParameters.x-amz-copy-source-range`	`target.resource.attribute.labels[req_x-amz-copy-source-range]`
`Records.requestParameters.x-amz-copy-source`	`target.resource.attribute.labels[req_x-amz-copy-source]`	If the `Records.eventName` log field value is equal to `UploadPartCopy` then, the `target.resource.attribute.labels.key` UDM field is set to `req_x-amz-copy-source` and `Records.requestParameters.x-amz-copy-source` log field is mapped to the `target.resource.attribute.labels.value` UDM field.

Field mapping reference: AWS CloudTrail - Elastic Load Balancer

The following table lists the log fields for the Elastic Load Balancer log type and their corresponding UDM fields.

Field mapping reference: AWS CloudTrail - APIGateway And SES

The following table lists the log fields for the APIGateway And SES log type and their corresponding UDM fields.

Log field	UDM mapping	Logic
`Records.additionalEventData.SignatureVersion`	`additional.fields[additional_event_data_signature_version]`
`Records.requestParameters.maxResults`	`additional.fields[req_max_results]`
`Records.requestParameters.reputationOptions.reputationMetricsEnabled`	`additional.fields[req_reputation_options_reputation_metrics_enabled]`
`Records.requestParameters.template`	`additional.fields[req_template]`
`Records.responseElements.corsConfiguration.allowCredentials`	`additional.fields[res_cors_configuration_allow_credentials]`
`Records.responseElements.defaultRouteSettings.detailedMetricsEnabled`	`additional.fields[res_default_route_settings_detailed_metrics_enabled]`
`Records.responseElements.deploymentById.template`	`additional.fields[res_deployment_by_id_template]`
`Records.responseElements.deploymentById.restApiId`	`additional.fields[res_deployment_by_id_rest_api_id]`
`Records.responseElements.deploymentCreate.restApiId`	`additional.fields[res_deployment_create_rest_api_id]`
`Records.responseElements.documentationpartById.restApiId`	`additional.fields[res_documentationpart_by_id_rest_api_id]`
`Records.responseElements.documentationpartCreate.restApiId`	`additional.fields[res_documentationpart_create_rest_api_id]`
`Records.responseElements.documentationpartImport.restApiId`	`additional.fields[res_documentationpart_import_rest_api_id]`
`Records.responseElements.documentationversionByVersion.restApiId`	`additional.fields[res_documentationversion_by_version_rest_api_id]`
`Records.responseElements.documentationversionCreate.restApiId`	`additional.fields[res_documentationversion_create_rest_api_id]`
`Records.responseElements.gatewayresponseByType.restApiId`	`additional.fields[res_gatewayresponse_by_type_rest_api_id]`
`Records.responseElements.gatewayresponsePut.restApiId`	`additional.fields[res_gatewayresponse_put_rest_api_id]`
`Records.responseElements.methodByHttpMethod.restApiId`	`additional.fields[res_method_by_http_method_rest_api_id]`
`Records.responseElements.methodPut.restApiId`	`additional.fields[res_method_put_rest_api_id]`
`Records.responseElements.methodPut.template`	`additional.fields[res_method_put_template]`
`Records.responseElements.modelByName.restApiId`	`additional.fields[res_model_by_name_rest_api_id]`
`Records.responseElements.modelCreate.restApiId`	`additional.fields[res_model_create_rest_api_id]`
`Records.responseElements.requestvalidatorById.restApiId`	`additional.fields[res_requestvalidator_by_id_rest_api_id]`
`Records.responseElements.requestvalidatorCreate.restApiId`	`additional.fields[res_requestvalidator_create_rest_api_id]`
`Records.responseElements.restapiDeployments.templateSkipList`	`additional.fields[res_rest_api_deployments_template_skip_list]`	Iterate through log field `Records.responseElements.restapiDeployments.templateSkipList`, then `res_rest_api_deployments_template_skip_list_%{index}` log field is mapped to the `additional.fields.key` UDM field and `Records.responseElements.restapiDeployments.templateSkipList` log field is mapped to the `additional.fields.value.string_value` UDM field.
`index`	`additional.fields[res_rest_api_deployments_template_skip_list]`	Iterate through log field `Records.responseElements.restapiDeployments.templateSkipList`, then `res_rest_api_deployments_template_skip_list_%{index}` log field is mapped to the `additional.fields.key` UDM field and `Records.responseElements.restapiDeployments.templateSkipList` log field is mapped to the `additional.fields.value.string_value` UDM field.
`Records.responseElements.restapiDeployments.template`	`additional.fields[res_rest_api_deployments_template]`
`Records.responseElements.resourceById.restApiId`	`additional.fields[res_resource_by_id_rest_api_id]`
`Records.responseElements.resourceCreateChild.restApiId`	`additional.fields[res_resource_create_child_rest_api_id]`
`Records.responseElements.resourceCreate.restApiId`	`additional.fields[res_resource_create_rest_api_id]`
`Records.responseElements.resourceDelete.restApiId`	`additional.fields[res_resource_delete_rest_api_id]`
`Records.responseElements.resourceUpdate.restApiId`	`additional.fields[res_resource_update_rest_api_id]`
`Records.responseElements.restapiDocumentationParts.template`	`additional.fields[res_rest_api_documentation_parts_template]`
`Records.responseElements.restapiDocumentationVersions.template`	`additional.fields[res_rest_api_documentation_versions_template]`
`Records.responseElements.restapiGatewayResponses.template`	`additional.fields[res_rest_api_gateway_responses_template]`
`Records.responseElements.restapiModels.template`	`additional.fields[res_rest_api_models_template]`
`Records.responseElements.restapiRequestValidators.template`	`additional.fields[res_rest_api_request_validators_template]`
`Records.responseElements.restapiResources.templateSkipList`	`additional.fields[res_rest_api_resources_template_skip_list]`	Iterate through log field `Records.responseElements.restapiResources.templateSkipList`, then `res_rest_api_resources_template_skip_list_%{index}` log field is mapped to the `additional.fields.key` UDM field and `Records.responseElements.restapiResources.templateSkipList` log field is mapped to the `additional.fields.value.string_value` UDM field.
`index`	`additional.fields[res_rest_api_resources_template_skip_list]`	Iterate through log field `Records.responseElements.restapiResources.templateSkipList`, then `res_rest_api_resources_template_skip_list_%{index}` log field is mapped to the `additional.fields.key` UDM field and `Records.responseElements.restapiResources.templateSkipList` log field is mapped to the `additional.fields.value.string_value` UDM field.
`Records.responseElements.restapiResources.template`	`additional.fields[res_rest_api_resources_template]`
`Records.responseElements.restapiStages.templateSkipList`	`additional.fields[res_rest_api_stages_template_skip_list]`	Iterate through log field `Records.responseElements.restapiStages.templateSkipList`, then `res_rest_api_stages_template_skip_list_%{index}` log field is mapped to the `additional.fields.key` UDM field and `Records.responseElements.restapiStages.templateSkipList` log field is mapped to the `additional.fields.value.string_value` UDM field.
`index`	`additional.fields[res_rest_api_stages_template_skip_list]`	Iterate through log field `Records.responseElements.restapiStages.templateSkipList`, then `res_rest_api_stages_template_skip_list_%{index}` log field is mapped to the `additional.fields.key` UDM field and `Records.responseElements.restapiStages.templateSkipList` log field is mapped to the `additional.fields.value.string_value` UDM field.
`Records.responseElements.restapiStages.template`	`additional.fields[res_rest_api_stages_template]`
`Records.responseElements.restapiUpdate.template`	`additional.fields[res_rest_api_update_template]`
`Records.responseElements.restapiAuthorizers.template`	`additional.fields[res_rest_api_authorizers_template]`
`Records.responseElements.restapiDelete.template`	`additional.fields[res_rest_api_delete_template]`
`Records.responseElements.resourceUpdate.template`	`additional.fields[res_resource_update_template]`
`Records.responseElements.protocolType`	`network.application_protocol`	If the `Records.responseElements.protocolType` log field value is equal to `HTTP` then, the `network.application_protocol` UDM field is set to `HTTP`.
`Records.requestParameters.template.subjectPart`	`network.email.subject`
`Records.responseElements.documentationpartCreate.template`	`additional.fields[res_documentationpart_create_template]`
`Records.responseElements.corsConfiguration.allowHeaders`	`security_result.detection_fields[res_cors_configuration_allow_headers]`	Iterate through log field `Records.responseElements.corsConfiguration.allowHeaders`, then the `security_result.detection_fields.key` UDM field is set to `res_cors_configuration_allow_headers` and `Records.responseElements.corsConfiguration.allowHeaders` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.responseElements.corsConfiguration.allowMethods`	`security_result.detection_fields[res_cors_configuration_allow_methods]`	Iterate through log field `Records.responseElements.corsConfiguration.allowMethods`, then the `security_result.detection_fields.key` UDM field is set to `res_cors_configuration_allow_methods` and `Records.responseElements.corsConfiguration.allowMethods` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.responseElements.deletionProtection`	`security_result.detection_fields[res_deletion_protection]`
`Records.responseElements.deploymentById.templateSkipList`	`additional.fields[res_deployment_by_id_template_skip_list]`	Iterate through log field `Records.responseElements.deploymentById.templateSkipList`, then `res_deployment_by_id_template_skip_list_%{index}` log field is mapped to the `additional.fields.key` UDM field and `Records.responseElements.deploymentById.templateSkipList` log field is mapped to the `additional.fields.value.string_value` UDM field.
`index`	`additional.fields[res_deployment_by_id_template_skip_list]`	Iterate through log field `Records.responseElements.deploymentById.templateSkipList`, then `res_deployment_by_id_template_skip_list_%{index}` log field is mapped to the `additional.fields.key` UDM field and `Records.responseElements.deploymentById.templateSkipList` log field is mapped to the `additional.fields.value.string_value` UDM field.
`Records.responseElements.disableExecuteApiEndpoint`	`security_result.detection_fields[res_disable_execute_api_endpoint]`
`Records.responseElements.documentationpartById.template`	`security_result.detection_fields[res_documentationpart_by_id_template]`
`Records.responseElements.documentationpartImport.failOnWarnings`	`security_result.detection_fields[res_documentationpart_import_fail_on_warnings]`
`Records.responseElements.documentationpartImport.template`	`security_result.detection_fields[res_documentationpart_import_template]`
`Records.responseElements.documentationversionByVersion.template`	`security_result.detection_fields[res_documentationversion_by_version_template]`
`Records.responseElements.description`	`security_result.detection_fields[res_description]`
`Records.responseElements.gatewayresponseByType.template`	`security_result.detection_fields[res_gatewayresponse_by_type_template]`
`Records.responseElements.methodByHttpMethod.resourceId`	`security_result.detection_fields[res_method_by_http_method_resource_id]`
`Records.responseElements.methodPut.resourceId`	`security_result.detection_fields[res_method_put_resource_id]`
`Records.responseElements.modelByName.flatten`	`security_result.detection_fields[res_model_by_name_flatten]`
`Records.responseElements.modelByName.template`	`security_result.detection_fields[res_model_by_name_template]`
`Records.responseElements.modelCreate.template`	`security_result.detection_fields[res_model_create_template]`
`Records.responseElements.requestvalidatorById.template`	`security_result.detection_fields[res_requestvalidator_by_id_template]`
`Records.responseElements.requestvalidatorCreate.template`	`security_result.detection_fields[res_requestvalidator_create_template]`
`Records.responseElements.resourceCreateChild.parentId`	`security_result.detection_fields[res_resource_create_child_parent_id]`
`Records.responseElements.resourceCreate.parentId`	`security_result.detection_fields[res_resource_create_parent_id]`
`Records.responseElements.resourceDelete.resourceId`	`security_result.detection_fields[res_resource_delete_resource_id]`
`Records.responseElements.resourceUpdate.resourceId`	`security_result.detection_fields[res_resource_update_resource_id]`
`Records.responseElements.restapiDocumentationParts.restApiId`	`security_result.detection_fields[res_rest_api_documentation_parts_rest_api_id]`
`Records.responseElements.restapiDocumentationVersions.restApiId`	`security_result.detection_fields[res_rest_api_documentation_versions_rest_api_id]`
`Records.responseElements.restapiGatewayResponses.restApiId`	`security_result.detection_fields[res_rest_api_gateway_responses_rest_api_id]`
`Records.responseElements.restapiModels.restApiId`	`security_result.detection_fields[res_rest_api_models_rest_api_id]`
`Records.responseElements.restapiRequestValidators.restApiId`	`security_result.detection_fields[res_rest_api_request_validators_rest_api_id]`
`Records.responseElements.restapiResources.restApiId`	`security_result.detection_fields[res_rest_api_resources_rest_api_id]`
`Records.responseElements.restapiStages.restApiId`	`security_result.detection_fields[res_rest_api_stages_rest_api_id]`
`Records.responseElements.restapiUpdate.restApiId`	`security_result.detection_fields[res_rest_api_update_rest_api_id]`
`Records.responseElements.restapiAuthorizers.restApiId`	`security_result.detection_fields[res_rest_api_authorizers_rest_api_id]`
`Records.responseElements.restapiDelete.restApiId`	`security_result.detection_fields[res_rest_api_delete_rest_api_id]`
`Records.responseElements.restapiDeployments.restApiId`	`security_result.detection_fields[res_rest_api_deployments_rest_api_id]`
`Records.responseElements.corsConfiguration.exposeHeaders`	`security_result.detection_fields[res_cors_configuration_expose_headers]`	Iterate through log field `Records.responseElements.corsConfiguration.exposeHeaders`, then the `security_result.detection_fields.key` UDM field is set to `res_cors_configuration_expose_headers` and `Records.responseElements.corsConfiguration.exposeHeaders` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.domainName`	`target.domain.name`	If the `Records.eventName` log field value contain one of the following values `GetApiMappings` `CreateApiMapping` then, `Records.requestParameters.domainName` log field is mapped to the `target.domain.name` UDM field. Else, if the `Records.eventName` log field value is equal to `PutEmailIdentityMailFromAttributes` then, `Records.requestParameters.mailFromDomain` log field is mapped to the `target.domain.name` UDM field.
`Records.requestParameters.mailFromDomain`	`target.domain.name`	If the `Records.eventName` log field value contain one of the following values `GetApiMappings` `CreateApiMapping` then, `Records.requestParameters.domainName` log field is mapped to the `target.domain.name` UDM field. Else, if the `Records.eventName` log field value is equal to `PutEmailIdentityMailFromAttributes` then, `Records.requestParameters.mailFromDomain` log field is mapped to the `target.domain.name` UDM field.
`Records.requestParameters.emailAddress`	`target.email`
`Records.responseElements.apiEndpoint`	`target.resource.attribute.labels[res_api_endpoint]`
`Records.responseElements.parentId`	`target.resource_ancestors.product_object_id`
`Records.responseElements.createdDate`	`target.resource.attribute.labels[res_created_date]`
`Records.requestParameters.apiMappingKey`	`target.resource.attribute.labels[req_api_mapping_key]`
`Records.requestParameters.stage`	`target.resource.attribute.labels[req_stage]`
`Records.responseElements.message`	`target.resource.attribute.labels[res_message]`
`Records.responseElements.pathPart`	`target.resource.attribute.labels[res_path_part]`
`Records.responseElements.path`	`target.resource.attribute.labels[res_path]`
`Records.requestParameters.behaviorOnMxFailure`	`target.resource.attribute.labels[req_behavior_on_mx_failure]`
`Records.requestParameters.body`	`target.resource.attribute.labels[req_body]`
`Records.requestParameters.deliveryOptions.tlsPolicy`	`target.resource.attribute.labels[req_delivery_options_tls_policy]`
`Records.requestParameters.limit`	`target.resource.attribute.labels[req_limit]`
`Records.requestParameters.nextToken`	`target.resource.attribute.labels[req_next_token]`
`Records.requestParameters.pageSize`	`target.resource.attribute.labels[req_page_size]`
`Records.requestParameters.template.htmlPart`	`target.resource.attribute.labels[req_template_html_part]`
`Records.requestParameters.template.textPart`	`target.resource.attribute.labels[req_template_text_part]`
`Records.responseElements.apiKeySelectionExpression`	`target.resource.attribute.labels[res_api_key_selection_expression]`
`Records.responseElements.autoDeploy`	`target.resource.attribute.labels[res_auto_deploy]`
`Records.responseElements.corsConfiguration.maxAge`	`target.resource.attribute.labels[res_cors_configuration_max_age]`
`Records.responseElements.documentationversionCreate.template`	`target.resource.attribute.labels[res_documentationversion_create_template]`
`Records.responseElements.deploymentCreate.template`	`target.resource.attribute.labels[res_deployment_create_template]`
`Records.responseElements.identityType`	`target.resource.attribute.labels[res_identity_type]`
`Records.responseElements.gatewayresponsePut.template`	`target.resource.attribute.labels[res_gatewayresponse_put_template]`
`Records.responseElements.methodByHttpMethod.template`	`target.resource.attribute.labels[res_method_by_http_method_template]`
`Records.responseElements.resourceCreateChild.template`	`target.resource.attribute.labels[res_resource_create_child_template]`
`Records.responseElements.resourceDelete.template`	`target.resource.attribute.labels[res_resource_delete_template]`
`Records.responseElements.resourceShareInvitation.resourceShareInvitationArn`	`target.resource.attribute.labels[res_resource_share_invitation_resource_share_invitation_arn]`
`Records.responseElements.routeSelectionExpression`	`target.resource.attribute.labels[res_route_selection_expression]`
`Records.responseElements.stageVariables`	`target.resource.attribute.labels[res_stage_variables]`
`Records.responseElements.resourceCreate.template`	`target.resource.attribute.labels[res_resource_create_template]`
`Records.responseElements.resourceById.template`	`target.resource.attribute.labels[res_resource_by_id_template]`
`Records.responseElements.verifiedForSendingStatus`	`target.resource.attribute.labels[res_verified_for_sending_status]`
`Records.responseElements.lastUpdatedDate`	`target.resource.attribute.last_update_time`
`Records.requestParameters.stageName`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateStage` `GetStage` and if the `Records.requestParameters.stageName` log field value is not empty then, `Records.requestParameters.stageName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ImportApi` `UpdateApi` and if the `Records.responseElements.name` log field value is not empty then, `Records.responseElements.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateConfigurationSet` `GetConfigurationSet` `GetConfigurationSetEventDestinations` and if the `Records.requestParameters.configurationSetName` log field value is not empty then, `Records.requestParameters.configurationSetName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateEmailIdentity` `PutEmailIdentityMailFromAttributes` and if the `Records.requestParameters.emailIdentity` log field value is not empty then, `Records.requestParameters.emailIdentity` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateTemplate` `DeleteTemplate` `UpdateTemplate` and if the `Records.requestParameters.templateName` log field value is not empty then, `Records.requestParameters.templateName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.template.templateName` log field value is not empty then, `Records.requestParameters.template.templateName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetContactList` `GetEmailIdentityPolicies` and if the `Records.requestParameters.contactListName` log field value is not empty then, `Records.requestParameters.contactListName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetEmailIdentity` `PutEmailIdentityDkimAttributes` and if the `Records.requestParameters.emailIdentity` log field value is not empty then, `Records.requestParameters.emailIdentity` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetIdentityDkimAttributes` `GetIdentityNotificationAttributes` `GetIdentityVerificationAttributes` then, Iterate through log field `Records.requestParameters.identities`, then If the `index` value is equal to `0` then, `Records.requestParameters.identities` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_identities` and `Records.requestParameters.identities` log field is mapped to the `target.resource.attribute.labels.value` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.name`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateStage` `GetStage` and if the `Records.requestParameters.stageName` log field value is not empty then, `Records.requestParameters.stageName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ImportApi` `UpdateApi` and if the `Records.responseElements.name` log field value is not empty then, `Records.responseElements.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateConfigurationSet` `GetConfigurationSet` `GetConfigurationSetEventDestinations` and if the `Records.requestParameters.configurationSetName` log field value is not empty then, `Records.requestParameters.configurationSetName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateEmailIdentity` `PutEmailIdentityMailFromAttributes` and if the `Records.requestParameters.emailIdentity` log field value is not empty then, `Records.requestParameters.emailIdentity` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateTemplate` `DeleteTemplate` `UpdateTemplate` and if the `Records.requestParameters.templateName` log field value is not empty then, `Records.requestParameters.templateName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.template.templateName` log field value is not empty then, `Records.requestParameters.template.templateName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetContactList` `GetEmailIdentityPolicies` and if the `Records.requestParameters.contactListName` log field value is not empty then, `Records.requestParameters.contactListName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetEmailIdentity` `PutEmailIdentityDkimAttributes` and if the `Records.requestParameters.emailIdentity` log field value is not empty then, `Records.requestParameters.emailIdentity` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetIdentityDkimAttributes` `GetIdentityNotificationAttributes` `GetIdentityVerificationAttributes` then, Iterate through log field `Records.requestParameters.identities`, then If the `index` value is equal to `0` then, `Records.requestParameters.identities` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_identities` and `Records.requestParameters.identities` log field is mapped to the `target.resource.attribute.labels.value` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.configurationSetName`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateStage` `GetStage` and if the `Records.requestParameters.stageName` log field value is not empty then, `Records.requestParameters.stageName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ImportApi` `UpdateApi` and if the `Records.responseElements.name` log field value is not empty then, `Records.responseElements.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateConfigurationSet` `GetConfigurationSet` `GetConfigurationSetEventDestinations` and if the `Records.requestParameters.configurationSetName` log field value is not empty then, `Records.requestParameters.configurationSetName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateEmailIdentity` `PutEmailIdentityMailFromAttributes` and if the `Records.requestParameters.emailIdentity` log field value is not empty then, `Records.requestParameters.emailIdentity` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateTemplate` `DeleteTemplate` `UpdateTemplate` and if the `Records.requestParameters.templateName` log field value is not empty then, `Records.requestParameters.templateName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.template.templateName` log field value is not empty then, `Records.requestParameters.template.templateName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetContactList` `GetEmailIdentityPolicies` and if the `Records.requestParameters.contactListName` log field value is not empty then, `Records.requestParameters.contactListName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetEmailIdentity` `PutEmailIdentityDkimAttributes` and if the `Records.requestParameters.emailIdentity` log field value is not empty then, `Records.requestParameters.emailIdentity` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetIdentityDkimAttributes` `GetIdentityNotificationAttributes` `GetIdentityVerificationAttributes` then, Iterate through log field `Records.requestParameters.identities`, then If the `index` value is equal to `0` then, `Records.requestParameters.identities` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_identities` and `Records.requestParameters.identities` log field is mapped to the `target.resource.attribute.labels.value` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.emailIdentity`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateStage` `GetStage` and if the `Records.requestParameters.stageName` log field value is not empty then, `Records.requestParameters.stageName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ImportApi` `UpdateApi` and if the `Records.responseElements.name` log field value is not empty then, `Records.responseElements.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateConfigurationSet` `GetConfigurationSet` `GetConfigurationSetEventDestinations` and if the `Records.requestParameters.configurationSetName` log field value is not empty then, `Records.requestParameters.configurationSetName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateEmailIdentity` `PutEmailIdentityMailFromAttributes` and if the `Records.requestParameters.emailIdentity` log field value is not empty then, `Records.requestParameters.emailIdentity` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateTemplate` `DeleteTemplate` `UpdateTemplate` and if the `Records.requestParameters.templateName` log field value is not empty then, `Records.requestParameters.templateName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.template.templateName` log field value is not empty then, `Records.requestParameters.template.templateName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetContactList` `GetEmailIdentityPolicies` and if the `Records.requestParameters.contactListName` log field value is not empty then, `Records.requestParameters.contactListName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetEmailIdentity` `PutEmailIdentityDkimAttributes` and if the `Records.requestParameters.emailIdentity` log field value is not empty then, `Records.requestParameters.emailIdentity` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetIdentityDkimAttributes` `GetIdentityNotificationAttributes` `GetIdentityVerificationAttributes` then, Iterate through log field `Records.requestParameters.identities`, then If the `index` value is equal to `0` then, `Records.requestParameters.identities` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_identities` and `Records.requestParameters.identities` log field is mapped to the `target.resource.attribute.labels.value` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.template.templateName`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateStage` `GetStage` and if the `Records.requestParameters.stageName` log field value is not empty then, `Records.requestParameters.stageName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ImportApi` `UpdateApi` and if the `Records.responseElements.name` log field value is not empty then, `Records.responseElements.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateConfigurationSet` `GetConfigurationSet` `GetConfigurationSetEventDestinations` and if the `Records.requestParameters.configurationSetName` log field value is not empty then, `Records.requestParameters.configurationSetName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateEmailIdentity` `PutEmailIdentityMailFromAttributes` and if the `Records.requestParameters.emailIdentity` log field value is not empty then, `Records.requestParameters.emailIdentity` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateTemplate` `DeleteTemplate` `UpdateTemplate` and if the `Records.requestParameters.templateName` log field value is not empty then, `Records.requestParameters.templateName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.template.templateName` log field value is not empty then, `Records.requestParameters.template.templateName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetContactList` `GetEmailIdentityPolicies` and if the `Records.requestParameters.contactListName` log field value is not empty then, `Records.requestParameters.contactListName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetEmailIdentity` `PutEmailIdentityDkimAttributes` and if the `Records.requestParameters.emailIdentity` log field value is not empty then, `Records.requestParameters.emailIdentity` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetIdentityDkimAttributes` `GetIdentityNotificationAttributes` `GetIdentityVerificationAttributes` then, Iterate through log field `Records.requestParameters.identities`, then If the `index` value is equal to `0` then, `Records.requestParameters.identities` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_identities` and `Records.requestParameters.identities` log field is mapped to the `target.resource.attribute.labels.value` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.templateName`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateStage` `GetStage` and if the `Records.requestParameters.stageName` log field value is not empty then, `Records.requestParameters.stageName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ImportApi` `UpdateApi` and if the `Records.responseElements.name` log field value is not empty then, `Records.responseElements.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateConfigurationSet` `GetConfigurationSet` `GetConfigurationSetEventDestinations` and if the `Records.requestParameters.configurationSetName` log field value is not empty then, `Records.requestParameters.configurationSetName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateEmailIdentity` `PutEmailIdentityMailFromAttributes` and if the `Records.requestParameters.emailIdentity` log field value is not empty then, `Records.requestParameters.emailIdentity` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateTemplate` `DeleteTemplate` `UpdateTemplate` and if the `Records.requestParameters.templateName` log field value is not empty then, `Records.requestParameters.templateName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.template.templateName` log field value is not empty then, `Records.requestParameters.template.templateName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetContactList` `GetEmailIdentityPolicies` and if the `Records.requestParameters.contactListName` log field value is not empty then, `Records.requestParameters.contactListName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetEmailIdentity` `PutEmailIdentityDkimAttributes` and if the `Records.requestParameters.emailIdentity` log field value is not empty then, `Records.requestParameters.emailIdentity` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetIdentityDkimAttributes` `GetIdentityNotificationAttributes` `GetIdentityVerificationAttributes` then, Iterate through log field `Records.requestParameters.identities`, then If the `index` value is equal to `0` then, `Records.requestParameters.identities` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_identities` and `Records.requestParameters.identities` log field is mapped to the `target.resource.attribute.labels.value` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.contactListName`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateStage` `GetStage` and if the `Records.requestParameters.stageName` log field value is not empty then, `Records.requestParameters.stageName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ImportApi` `UpdateApi` and if the `Records.responseElements.name` log field value is not empty then, `Records.responseElements.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateConfigurationSet` `GetConfigurationSet` `GetConfigurationSetEventDestinations` and if the `Records.requestParameters.configurationSetName` log field value is not empty then, `Records.requestParameters.configurationSetName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateEmailIdentity` `PutEmailIdentityMailFromAttributes` and if the `Records.requestParameters.emailIdentity` log field value is not empty then, `Records.requestParameters.emailIdentity` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateTemplate` `DeleteTemplate` `UpdateTemplate` and if the `Records.requestParameters.templateName` log field value is not empty then, `Records.requestParameters.templateName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.template.templateName` log field value is not empty then, `Records.requestParameters.template.templateName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetContactList` `GetEmailIdentityPolicies` and if the `Records.requestParameters.contactListName` log field value is not empty then, `Records.requestParameters.contactListName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetEmailIdentity` `PutEmailIdentityDkimAttributes` and if the `Records.requestParameters.emailIdentity` log field value is not empty then, `Records.requestParameters.emailIdentity` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetIdentityDkimAttributes` `GetIdentityNotificationAttributes` `GetIdentityVerificationAttributes` then, Iterate through log field `Records.requestParameters.identities`, then If the `index` value is equal to `0` then, `Records.requestParameters.identities` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_identities` and `Records.requestParameters.identities` log field is mapped to the `target.resource.attribute.labels.value` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.identities`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateStage` `GetStage` and if the `Records.requestParameters.stageName` log field value is not empty then, `Records.requestParameters.stageName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ImportApi` `UpdateApi` and if the `Records.responseElements.name` log field value is not empty then, `Records.responseElements.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateConfigurationSet` `GetConfigurationSet` `GetConfigurationSetEventDestinations` and if the `Records.requestParameters.configurationSetName` log field value is not empty then, `Records.requestParameters.configurationSetName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateEmailIdentity` `PutEmailIdentityMailFromAttributes` and if the `Records.requestParameters.emailIdentity` log field value is not empty then, `Records.requestParameters.emailIdentity` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateTemplate` `DeleteTemplate` `UpdateTemplate` and if the `Records.requestParameters.templateName` log field value is not empty then, `Records.requestParameters.templateName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.template.templateName` log field value is not empty then, `Records.requestParameters.template.templateName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetContactList` `GetEmailIdentityPolicies` and if the `Records.requestParameters.contactListName` log field value is not empty then, `Records.requestParameters.contactListName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetEmailIdentity` `PutEmailIdentityDkimAttributes` and if the `Records.requestParameters.emailIdentity` log field value is not empty then, `Records.requestParameters.emailIdentity` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetIdentityDkimAttributes` `GetIdentityNotificationAttributes` `GetIdentityVerificationAttributes` then, Iterate through log field `Records.requestParameters.identities`, then If the `index` value is equal to `0` then, `Records.requestParameters.identities` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_identities` and `Records.requestParameters.identities` log field is mapped to the `target.resource.attribute.labels.value` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.restApiId`	`target.resource.product_object_id`	If the `Records.eventName` log field value contain one of the following values `DeleteRestApi` `GetDocumentationParts` `ImportApi` `CreateResource` and if the `Records.requestParameters.restApiId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.restApiId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateStage` `GetStage` and if the `Records.requestParameters.apiId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `SNAPSHOT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.apiId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `GetStages` and if the `Records.requestParameters.restApiId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `SNAPSHOT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.restApiId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `GetApi` `GetAuthorizers` `GetRoutes` `UpdateApi` `CreateApiMapping` and if the `Records.responseElements.apiId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.responseElements.apiId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.requestParameters.apiId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and `Records.requestParameters.apiId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.apiId`	`target.resource.product_object_id`	If the `Records.eventName` log field value contain one of the following values `DeleteRestApi` `GetDocumentationParts` `ImportApi` `CreateResource` and if the `Records.requestParameters.restApiId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.restApiId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateStage` `GetStage` and if the `Records.requestParameters.apiId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `SNAPSHOT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.apiId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `GetStages` and if the `Records.requestParameters.restApiId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `SNAPSHOT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.restApiId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `GetApi` `GetAuthorizers` `GetRoutes` `UpdateApi` `CreateApiMapping` and if the `Records.responseElements.apiId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.responseElements.apiId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.requestParameters.apiId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and `Records.requestParameters.apiId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.apiId`	`target.resource.product_object_id`	If the `Records.eventName` log field value contain one of the following values `DeleteRestApi` `GetDocumentationParts` `ImportApi` `CreateResource` and if the `Records.requestParameters.restApiId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.restApiId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateStage` `GetStage` and if the `Records.requestParameters.apiId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `SNAPSHOT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.apiId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `GetStages` and if the `Records.requestParameters.restApiId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `SNAPSHOT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.restApiId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `GetApi` `GetAuthorizers` `GetRoutes` `UpdateApi` `CreateApiMapping` and if the `Records.responseElements.apiId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.responseElements.apiId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.requestParameters.apiId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and `Records.requestParameters.apiId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.

Field mapping reference: AWS CloudTrail - AutoScale and Appconfig

The following table lists the log fields for the AutoScale and Appconfig log type and their corresponding UDM fields.

Log field	UDM mapping	Logic
`Records.requestParameters.deploymentNumber`	`additional.fields[req_deployment_number]`
`Records.requestParameters.deploymentStrategyId`	`additional.fields[req_deployment_strategy_id]`
`Records.requestParameters.maxRecords`	`additional.fields[req_max_records]`
`Records.requestParameters.keyName`	`security_result.detection_fields[req_key_name]`
`Records.requestParameters.lifecycleActionToken`	`security_result.detection_fields[req_lifecycle_action_token]`
`Records.requestParameters.securityGroups`	`security_result.detection_fields[req_security_groups]`	Iterate through log field `Records.requestParameters.securityGroups`, then the `security_result.detection_fields.key` UDM field is set to `req_security_group` and `Records.requestParameters.securityGroups` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.serviceNamespace`	`target.application`
`Records.requestParameters.blockDeviceMappings.ebs.deleteOnTermination`	`target.resource_ancestors.attribute.labels[req_block_device_mappings_ebs_delete_on_termination]`	Iterate through log field `Records.requestParameters.blockDeviceMappings`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `req_block_device_mappings_ebs_delete_on_termination` and `Records.requestParameters.blockDeviceMappings.ebs.deleteOnTermination` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.requestParameters.blockDeviceMappings.ebs.encrypted`	`target.resource_ancestors.attribute.labels[req_block_device_mappings_ebs_encrypted]`	Iterate through log field `Records.requestParameters.blockDeviceMappings`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `req_block_device_mappings_ebs_encrypted` and `Records.requestParameters.blockDeviceMappings.ebs.encrypted` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.requestParameters.blockDeviceMappings.ebs.volumeSize`	`target.resource_ancestors.attribute.labels[req_block_device_mappings_ebs_volume_size]`	Iterate through log field `Records.requestParameters.blockDeviceMappings`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `req_block_device_mappings_ebs_volume_size` and `Records.requestParameters.blockDeviceMappings.ebs.volumeSize` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.requestParameters.blockDeviceMappings.ebs.volumeType`	`target.resource_ancestors.attribute.labels[req_block_device_mappings_ebs_volume_type]`	Iterate through log field `Records.requestParameters.blockDeviceMappings`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `req_block_device_mappings_ebs_volume_type` and `Records.requestParameters.blockDeviceMappings.ebs.volumeType` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.requestParameters.ebsOptimized`	`target.resource_ancestors.attribute.labels[req_ebs_optimized]`
`Records.requestParameters.lifecycleHookSpecificationList.defaultResult`	`target.resource_ancestors.attribute.labels[req_lifecycle_hook_specification_list_default_result]`	Iterate through log field `Records.requestParameters.lifecycleHookSpecificationList`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `req_lifecycle_hook_specification_list_default_result` and `Records.requestParameters.lifecycleHookSpecificationList.defaultResult` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.requestParameters.lifecycleHookSpecificationList.heartbeatTimeout`	`target.resource_ancestors.attribute.labels[req_lifecycle_hook_specification_list_heartbeat_timeout]`	Iterate through log field `Records.requestParameters.lifecycleHookSpecificationList`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `req_lifecycle_hook_specification_list_heartbeat_timeout` and `Records.requestParameters.lifecycleHookSpecificationList.heartbeatTimeout` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.requestParameters.lifecycleHookSpecificationList.lifecycleHookName`	`target.resource_ancestors.attribute.labels[req_lifecycle_hook_specification_list_lifecycle_hook_name]`	Iterate through log field `Records.requestParameters.lifecycleHookSpecificationList`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `req_lifecycle_hook_specification_list_lifecycle_hook_name` and `Records.requestParameters.lifecycleHookSpecificationList.lifecycleHookName` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.requestParameters.lifecycleHookSpecificationList.lifecycleTransition`	`target.resource_ancestors.attribute.labels[req_lifecycle_hook_specification_list_lifecycle_transition]`	Iterate through log field `Records.requestParameters.lifecycleHookSpecificationList`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `req_lifecycle_hook_specification_list_lifecycle_transition` and `Records.requestParameters.lifecycleHookSpecificationList.lifecycleTransition` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.requestParameters.autoScalingGroupName`	`target.resource_ancestors.name`	If the `Records.eventName` log field value contain one of the following values `AttachLoadBalancerTargetGroups` `DetachLoadBalancerTargetGroups` then, Iterate through log field `Records.requestParameters.targetGroupARNs`, then `Records.requestParameters.targetGroupARNs` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAutoScalingGroup` then, Iterate through log field `Records.requestParameters.lifecycleHookSpecificationList`, then `Records.requestParameters.lifecycleHookSpecificationList.notificationTargetARN` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `SETTING` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Iterate through log field `Records.requestParameters.targetGroupARNs`, then `Records.requestParameters.targetGroupARNs` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateLaunchConfiguration` then, Iterate through log field `Records.requestParameters.blockDeviceMappings`, then `Records.requestParameters.blockDeviceMappings.deviceName` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.If the `Records.requestParameters.iamInstanceProfile` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.iamInstanceProfile` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `ACCESS_POLICY`. Else, if the `Records.eventName` log field value contain one of the following values `PutScalingPolicy` `SetInstanceProtection` and if the `Records.requestParameters.autoScalingGroupName` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.autoScalingGroupName` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `SETTING`.
`Records.requestParameters.targetGroupARNs`	`target.resource_ancestors.name`	If the `Records.eventName` log field value contain one of the following values `AttachLoadBalancerTargetGroups` `DetachLoadBalancerTargetGroups` then, Iterate through log field `Records.requestParameters.targetGroupARNs`, then `Records.requestParameters.targetGroupARNs` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAutoScalingGroup` then, Iterate through log field `Records.requestParameters.lifecycleHookSpecificationList`, then `Records.requestParameters.lifecycleHookSpecificationList.notificationTargetARN` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `SETTING` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Iterate through log field `Records.requestParameters.targetGroupARNs`, then `Records.requestParameters.targetGroupARNs` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateLaunchConfiguration` then, Iterate through log field `Records.requestParameters.blockDeviceMappings`, then `Records.requestParameters.blockDeviceMappings.deviceName` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.If the `Records.requestParameters.iamInstanceProfile` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.iamInstanceProfile` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `ACCESS_POLICY`. Else, if the `Records.eventName` log field value contain one of the following values `PutScalingPolicy` `SetInstanceProtection` and if the `Records.requestParameters.autoScalingGroupName` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.autoScalingGroupName` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `SETTING`.
`Records.requestParameters.lifecycleHookSpecificationList.notificationTargetARN`	`target.resource_ancestors.name`	If the `Records.eventName` log field value contain one of the following values `AttachLoadBalancerTargetGroups` `DetachLoadBalancerTargetGroups` then, Iterate through log field `Records.requestParameters.targetGroupARNs`, then `Records.requestParameters.targetGroupARNs` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAutoScalingGroup` then, Iterate through log field `Records.requestParameters.lifecycleHookSpecificationList`, then `Records.requestParameters.lifecycleHookSpecificationList.notificationTargetARN` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `SETTING` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Iterate through log field `Records.requestParameters.targetGroupARNs`, then `Records.requestParameters.targetGroupARNs` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateLaunchConfiguration` then, Iterate through log field `Records.requestParameters.blockDeviceMappings`, then `Records.requestParameters.blockDeviceMappings.deviceName` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.If the `Records.requestParameters.iamInstanceProfile` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.iamInstanceProfile` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `ACCESS_POLICY`. Else, if the `Records.eventName` log field value contain one of the following values `PutScalingPolicy` `SetInstanceProtection` and if the `Records.requestParameters.autoScalingGroupName` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.autoScalingGroupName` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `SETTING`.
`Records.requestParameters.targetGroupARNs`	`target.resource_ancestors.name`	If the `Records.eventName` log field value contain one of the following values `AttachLoadBalancerTargetGroups` `DetachLoadBalancerTargetGroups` then, Iterate through log field `Records.requestParameters.targetGroupARNs`, then `Records.requestParameters.targetGroupARNs` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAutoScalingGroup` then, Iterate through log field `Records.requestParameters.lifecycleHookSpecificationList`, then `Records.requestParameters.lifecycleHookSpecificationList.notificationTargetARN` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `SETTING` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Iterate through log field `Records.requestParameters.targetGroupARNs`, then `Records.requestParameters.targetGroupARNs` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateLaunchConfiguration` then, Iterate through log field `Records.requestParameters.blockDeviceMappings`, then `Records.requestParameters.blockDeviceMappings.deviceName` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.If the `Records.requestParameters.iamInstanceProfile` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.iamInstanceProfile` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `ACCESS_POLICY`. Else, if the `Records.eventName` log field value contain one of the following values `PutScalingPolicy` `SetInstanceProtection` and if the `Records.requestParameters.autoScalingGroupName` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.autoScalingGroupName` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `SETTING`.
`Records.requestParameters.blockDeviceMappings.deviceName`	`target.resource_ancestors.name`	If the `Records.eventName` log field value contain one of the following values `AttachLoadBalancerTargetGroups` `DetachLoadBalancerTargetGroups` then, Iterate through log field `Records.requestParameters.targetGroupARNs`, then `Records.requestParameters.targetGroupARNs` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAutoScalingGroup` then, Iterate through log field `Records.requestParameters.lifecycleHookSpecificationList`, then `Records.requestParameters.lifecycleHookSpecificationList.notificationTargetARN` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `SETTING` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Iterate through log field `Records.requestParameters.targetGroupARNs`, then `Records.requestParameters.targetGroupARNs` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateLaunchConfiguration` then, Iterate through log field `Records.requestParameters.blockDeviceMappings`, then `Records.requestParameters.blockDeviceMappings.deviceName` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.If the `Records.requestParameters.iamInstanceProfile` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.iamInstanceProfile` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `ACCESS_POLICY`. Else, if the `Records.eventName` log field value contain one of the following values `PutScalingPolicy` `SetInstanceProtection` and if the `Records.requestParameters.autoScalingGroupName` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.autoScalingGroupName` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `SETTING`.
`Records.requestParameters.iamInstanceProfile`	`target.resource_ancestors.name`	If the `Records.eventName` log field value contain one of the following values `AttachLoadBalancerTargetGroups` `DetachLoadBalancerTargetGroups` then, Iterate through log field `Records.requestParameters.targetGroupARNs`, then `Records.requestParameters.targetGroupARNs` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAutoScalingGroup` then, Iterate through log field `Records.requestParameters.lifecycleHookSpecificationList`, then `Records.requestParameters.lifecycleHookSpecificationList.notificationTargetARN` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `SETTING` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Iterate through log field `Records.requestParameters.targetGroupARNs`, then `Records.requestParameters.targetGroupARNs` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateLaunchConfiguration` then, Iterate through log field `Records.requestParameters.blockDeviceMappings`, then `Records.requestParameters.blockDeviceMappings.deviceName` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.If the `Records.requestParameters.iamInstanceProfile` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.iamInstanceProfile` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `ACCESS_POLICY`. Else, if the `Records.eventName` log field value contain one of the following values `PutScalingPolicy` `SetInstanceProtection` and if the `Records.requestParameters.autoScalingGroupName` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and `Records.requestParameters.autoScalingGroupName` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `SETTING`.
`Records.requestParameters.instanceIds`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AttachInstances` then, Iterate through log field `Records.requestParameters.instanceIds`, then `Records.requestParameters.instanceIds` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.adjustmentType`	`target.resource.attribute.labels[req_adjustment_type]`
`Records.requestParameters.associatePublicIpAddress`	`target.resource.attribute.labels[req_associate_public_ip_address]`
`Records.requestParameters.availabilityZones`	`target.resource.attribute.labels[req_availability_zones]`	Iterate through log field `Records.requestParameters.availabilityZones`, then the `target.resource.attribute.labels.key` UDM field is set to `req_availability_zones` and `Records.requestParameters.availabilityZones` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.capacityRebalance`	`target.resource.attribute.labels[req_capacity_rebalance]`
`Records.requestParameters.configurationProfileId`	`target.resource.attribute.labels[req_configuration_profile_id]`
`Records.requestParameters.defaultCooldown`	`target.resource.attribute.labels[req_default_cooldown]`
`Records.requestParameters.defaultInstanceWarmup`	`target.resource.attribute.labels[req_default_instance_warmup]`
`Records.requestParameters.desiredCapacity`	`target.resource.attribute.labels[req_desired_capacity]`
`Records.requestParameters.environmentId`	`target.resource.attribute.labels[req_environment_id]`
`Records.requestParameters.filters.name`	`target.resource.attribute.labels[req_filters_name]`	Iterate through log field `Records.requestParameters.filters`, then the `target.resource.attribute.labels.key` UDM field is set to `req_filters_name` and `Records.requestParameters.filters.name` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.filters.values`	`target.resource.attribute.labels[req_filters_values]`	Iterate through log field `Records.requestParameters.filters`, then Iterate through log field `Records.requestParameters.filters.values`, then the `target.resource.attribute.labels.key` UDM field is set to `req_filters_values` and `Records.requestParameters.filters.values` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.forceDelete`	`target.resource.attribute.labels[req_force_delete]`
`Records.requestParameters.healthCheckGracePeriod`	`target.resource.attribute.labels[req_health_check_grace_period]`
`Records.requestParameters.healthCheckType`	`target.resource.attribute.labels[req_health_check_type]`
`Records.requestParameters.honorCooldown`	`target.resource.attribute.labels[req_honor_cooldown]`
`Records.requestParameters.imageId`	`target.resource.attribute.labels[req_image_id]`
`Records.requestParameters.instanceMonitoring.enabled`	`target.resource.attribute.labels[req_instance_monitoring_enabled]`
`Records.requestParameters.instanceType`	`target.resource.attribute.labels[req_instance_type]`
`Records.requestParameters.launchConfigurationName`	`target.resource.attribute.labels[req_launch_configuration_name]`	If the `Records.eventName` log field value is not equal to `CreateLaunchConfiguration` then, the `target.resource.attribute.labels.key` UDM field is set to `req_launch_configuration_name` and `Records.requestParameters.launchConfigurationName` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.launchTemplate.launchTemplateId`	`target.resource.attribute.labels[req_launch_template_launch_template_id]`
`Records.requestParameters.launchTemplate.version`	`target.resource.attribute.labels[req_launch_template_version]`
`Records.requestParameters.lifecycleActionResult`	`target.resource.attribute.labels[req_lifecycle_action_result]`
`Records.requestParameters.lifecycleHookName`	`target.resource.attribute.labels[req_lifecycle_hook_name]`
`Records.requestParameters.lifecycleHookNames`	`target.resource.attribute.labels[req_lifecycle_hook_names]`	Iterate through log field `Records.requestParameters.lifecycleHookNames`, then the `target.resource.attribute.labels.key` UDM field is set to `req_lifecycle_hook_names` and `Records.requestParameters.lifecycleHookNames` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.maxInstanceLifetime`	`target.resource.attribute.labels[req_max_instance_lifetime]`
`Records.requestParameters.maxResults`	`target.resource.attribute.labels[req_max_results]`
`Records.requestParameters.maxSize`	`target.resource.attribute.labels[req_max_size]`
`Records.requestParameters.metadataOptions.httpEndpoint`	`target.resource.attribute.labels[req_metadata_options_http_endpoint]`
`Records.requestParameters.metadataOptions.httpPutResponseHopLimit`	`target.resource.attribute.labels[req_metadata_options_http_put_response_hop_limit]`
`Records.requestParameters.metadataOptions.httpTokens`	`target.resource.attribute.labels[req_metadata_options_http_tokens]`
`Records.requestParameters.minSize`	`target.resource.attribute.labels[req_min_size]`
`Records.requestParameters.minimumStartTime`	`target.resource.attribute.labels[req_minimum_start_time]`
`Records.requestParameters.mixedInstancesPolicy.instancesDistribution.onDemandAllocationStrategy`	`target.resource.attribute.labels[req_mixed_instances_policy_instances_distribution_on_demand_allocation_strategy]`
`Records.requestParameters.mixedInstancesPolicy.instancesDistribution.onDemandPercentageAboveBaseCapacity`	`target.resource.attribute.labels[req_mixed_instances_policy_instances_distribution_on_demand_percentage_above_base_capacity]`
`Records.requestParameters.mixedInstancesPolicy.instancesDistribution.spotAllocationStrategy`	`target.resource.attribute.labels[req_mixed_instances_policy_instances_distribution_spot_allocation_strategy]`
`Records.requestParameters.mixedInstancesPolicy.launchTemplate.launchTemplateSpecification.launchTemplateId`	`target.resource.attribute.labels[req_mixed_instances_policy_launch_template_launch_template_specification_launch_template_id]`
`Records.requestParameters.mixedInstancesPolicy.launchTemplate.launchTemplateSpecification.version`	`target.resource.attribute.labels[req_mixed_instances_policy_launch_template_launch_template_specification_version]`
`Records.requestParameters.mixedInstancesPolicy.launchTemplate.overrides.instanceType`	`target.resource.attribute.labels[req_mixed_instances_policy_launch_template_overrides_instance_type]`	Iterate through log field `Records.requestParameters.mixedInstancesPolicy.launchTemplate.overrides`, then the `target.resource.attribute.labels.key` UDM field is set to `req_mixed_instances_policy_launch_template_overrides_instance_type` and `Records.requestParameters.mixedInstancesPolicy.launchTemplate.overrides.instanceType` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.newInstancesProtectedFromScaleIn`	`target.resource.attribute.labels[req_new_instances_protected_from_scale_in]`
`Records.requestParameters.nextToken`	`target.resource.attribute.labels[req_next_token]`
`Records.requestParameters.notificationTypes`	`target.resource.attribute.labels[req_notification_types]`	Iterate through log field `Records.requestParameters.notificationTypes`, then the `target.resource.attribute.labels.key` UDM field is set to `req_notification_types` and `Records.requestParameters.notificationTypes` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.policyNames`	`target.resource.attribute.labels[req_policy_names]`	Iterate through log field `Records.requestParameters.policyNames`, then the `target.resource.attribute.labels.key` UDM field is set to `req_policy_names` and `Records.requestParameters.policyNames` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.policyTypes`	`target.resource.attribute.labels[req_policy_types]`	Iterate through log field `Records.requestParameters.policyTypes`, then the `target.resource.attribute.labels.key` UDM field is set to `req_policy_types` and `Records.requestParameters.policyTypes` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.preferences.autoRollback`	`target.resource.attribute.labels[req_preferences_auto_rollback]`
`Records.requestParameters.preferences.instanceWarmup`	`target.resource.attribute.labels[req_preferences_instance_warmup]`
`Records.requestParameters.preferences.maxHealthyPercentage`	`target.resource.attribute.labels[req_preferences_max_healthy_percentage]`
`Records.requestParameters.preferences.minHealthyPercentage`	`target.resource.attribute.labels[req_preferences_min_healthy_percentage]`
`Records.requestParameters.preferences.scaleInProtectedInstances`	`target.resource.attribute.labels[req_preferences_scale_in_protected_instances]`
`Records.requestParameters.preferences.skipMatching`	`target.resource.attribute.labels[req_preferences_skip_matching]`
`Records.requestParameters.preferences.standbyInstances`	`target.resource.attribute.labels[req_preferences_standby_instances]`
`Records.requestParameters.protectedFromScaleIn`	`target.resource.attribute.labels[req_protected_from_scale_in]`
`Records.requestParameters.scalableDimension`	`target.resource.attribute.labels[req_scalable_dimension]`
`Records.requestParameters.scalingAdjustment`	`target.resource.attribute.labels[req_scaling_adjustment]`
`Records.requestParameters.scalingProcesses`	`target.resource.attribute.labels[req_scaling_processes]`	Iterate through log field `Records.requestParameters.scalingProcesses`, then the `target.resource.attribute.labels.key` UDM field is set to `req_scaling_processes` and `Records.requestParameters.scalingProcesses` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.scheduledActionName`	`target.resource.attribute.labels[req_scheduled_action_name]`
`Records.requestParameters.shouldDecrementDesiredCapacity`	`target.resource.attribute.labels[req_should_decrement_desired_capacity]`
`Records.requestParameters.startTime`	`target.resource.attribute.labels[req_start_time]`
`Records.requestParameters.tags.key`	`target.resource.attribute.labels[req_tags_value]`	Iterate through log field `Records.requestParameters.tags`, then `Records.requestParameters.tags.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.tags.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.tags.value`	`target.resource.attribute.labels[req_tags_value]`	Iterate through log field `Records.requestParameters.tags`, then `Records.requestParameters.tags.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.tags.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.terminationPolicies`	`target.resource.attribute.labels[req_termination_policies]`	Iterate through log field `Records.requestParameters.terminationPolicies`, then the `target.resource.attribute.labels.key` UDM field is set to `req_termination_policies` and `Records.requestParameters.terminationPolicies` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.topicARN`	`target.resource.attribute.labels[req_topic_arn]`
`Records.requestParameters.vPCZoneIdentifier`	`target.resource.attribute.labels[req_v_pczone_identifier]`
`Records.responseElements.activities.activityId`	`target.resource.attribute.labels[res_activities_activity_id]`	Iterate through log field `Records.responseElements.activities`, then the `target.resource.attribute.labels.key` UDM field is set to `res_activities_activity_id` and `Records.responseElements.activities.activityId` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.activities.cause`	`target.resource.attribute.labels[res_activities_cause]`	Iterate through log field `Records.responseElements.activities`, then the `target.resource.attribute.labels.key` UDM field is set to `res_activities_cause` and `Records.responseElements.activities.cause` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.activities.description`	`target.resource.attribute.labels[res_activities_description]`	Iterate through log field `Records.responseElements.activities`, then the `target.resource.attribute.labels.key` UDM field is set to `res_activities_description` and `Records.responseElements.activities.description` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.activities.details`	`target.resource.attribute.labels[res_activities_details]`	Iterate through log field `Records.responseElements.activities`, then the `target.resource.attribute.labels.key` UDM field is set to `res_activities_details` and `Records.responseElements.activities.details` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.activities.progress`	`target.resource.attribute.labels[res_activities_progress]`	Iterate through log field `Records.responseElements.activities`, then the `target.resource.attribute.labels.key` UDM field is set to `res_activities_progress` and `Records.responseElements.activities.progress` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.activities.startTime`	`target.resource.attribute.labels[res_activities_start_time]`	Iterate through log field `Records.responseElements.activities`, then the `target.resource.attribute.labels.key` UDM field is set to `res_activities_start_time` and `Records.responseElements.activities.startTime` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.activities.statusCode`	`target.resource.attribute.labels[res_activities_status_code]`	Iterate through log field `Records.responseElements.activities`, then the `target.resource.attribute.labels.key` UDM field is set to `res_activities_status_code` and `Records.responseElements.activities.statusCode` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.activity.activityId`	`target.resource.attribute.labels[res_activity_activity_id]`
`Records.responseElements.activity.cause`	`target.resource.attribute.labels[res_activity_cause]`
`Records.responseElements.activity.description`	`target.resource.attribute.labels[res_activity_description]`
`Records.responseElements.activity.details`	`target.resource.attribute.labels[res_activity_details]`
`Records.responseElements.activity.progress`	`target.resource.attribute.labels[res_activity_progress]`
`Records.responseElements.activity.startTime`	`target.resource.attribute.labels[res_activity_start_time]`
`Records.responseElements.activity.statusCode`	`target.resource.attribute.labels[res_activity_status_code]`
`Records.responseElements.instanceRefreshId`	`target.resource.attribute.labels[res_instance_refresh_id]`
`Records.requestParameters.resourceArn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachInstances` `AttachLoadBalancerTargetGroups` `CreateAutoScalingGroup` `DeleteAutoScalingGroup` `DeleteScheduledAction` `DeletePolicy` `DescribeInstanceRefreshes` `DescribeLifecycleHooks` `DescribeLoadBalancerTargetGroups` `DescribeNotificationConfigurations` `DescribePolicies` `DescribeScheduledActions` `DescribeWarmPool` `DetachLoadBalancerTargetGroups` `PutNotificationConfiguration` `PutScheduledUpdateGroupAction` `ResumeProcesses` `SetDesiredCapacity` `StartInstanceRefresh` `SuspendProcesses` `UpdateAutoScalingGroup` and if the `Records.requestParameters.autoScalingGroupName` log field value is not empty then, `Records.requestParameters.autoScalingGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeScalingActivities` `DetachInstances` `TerminateInstanceInAutoScalingGroup` and if the `Records.responseElements.activity.autoScalingGroupName` log field value is not empty then, `Records.responseElements.activity.autoScalingGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateLaunchConfiguration` and if the `Records.requestParameters.launchConfigurationName` log field value is not empty then, `Records.requestParameters.launchConfigurationName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `PutScalingPolicy` and if the `Records.responseElements.policyARN` log field value is not empty then, `Records.responseElements.policyARN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeAutoScalingGroups` then, Iterate through log field `Records.requestParameters.autoScalingGroupNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.autoScalingGroupNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_launch_configuration_name` and `Records.requestParameters.autoScalingGroupNames` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchConfigurations` then, Iterate through log field `Records.requestParameters.launchConfigurationNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.launchConfigurationNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_launch_configuration_name` and `Records.requestParameters.launchConfigurationNames` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.autoScalingGroupName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachInstances` `AttachLoadBalancerTargetGroups` `CreateAutoScalingGroup` `DeleteAutoScalingGroup` `DeleteScheduledAction` `DeletePolicy` `DescribeInstanceRefreshes` `DescribeLifecycleHooks` `DescribeLoadBalancerTargetGroups` `DescribeNotificationConfigurations` `DescribePolicies` `DescribeScheduledActions` `DescribeWarmPool` `DetachLoadBalancerTargetGroups` `PutNotificationConfiguration` `PutScheduledUpdateGroupAction` `ResumeProcesses` `SetDesiredCapacity` `StartInstanceRefresh` `SuspendProcesses` `UpdateAutoScalingGroup` and if the `Records.requestParameters.autoScalingGroupName` log field value is not empty then, `Records.requestParameters.autoScalingGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeScalingActivities` `DetachInstances` `TerminateInstanceInAutoScalingGroup` and if the `Records.responseElements.activity.autoScalingGroupName` log field value is not empty then, `Records.responseElements.activity.autoScalingGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateLaunchConfiguration` and if the `Records.requestParameters.launchConfigurationName` log field value is not empty then, `Records.requestParameters.launchConfigurationName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `PutScalingPolicy` and if the `Records.responseElements.policyARN` log field value is not empty then, `Records.responseElements.policyARN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeAutoScalingGroups` then, Iterate through log field `Records.requestParameters.autoScalingGroupNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.autoScalingGroupNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_launch_configuration_name` and `Records.requestParameters.autoScalingGroupNames` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchConfigurations` then, Iterate through log field `Records.requestParameters.launchConfigurationNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.launchConfigurationNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_launch_configuration_name` and `Records.requestParameters.launchConfigurationNames` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.autoScalingGroupNames`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachInstances` `AttachLoadBalancerTargetGroups` `CreateAutoScalingGroup` `DeleteAutoScalingGroup` `DeleteScheduledAction` `DeletePolicy` `DescribeInstanceRefreshes` `DescribeLifecycleHooks` `DescribeLoadBalancerTargetGroups` `DescribeNotificationConfigurations` `DescribePolicies` `DescribeScheduledActions` `DescribeWarmPool` `DetachLoadBalancerTargetGroups` `PutNotificationConfiguration` `PutScheduledUpdateGroupAction` `ResumeProcesses` `SetDesiredCapacity` `StartInstanceRefresh` `SuspendProcesses` `UpdateAutoScalingGroup` and if the `Records.requestParameters.autoScalingGroupName` log field value is not empty then, `Records.requestParameters.autoScalingGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeScalingActivities` `DetachInstances` `TerminateInstanceInAutoScalingGroup` and if the `Records.responseElements.activity.autoScalingGroupName` log field value is not empty then, `Records.responseElements.activity.autoScalingGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateLaunchConfiguration` and if the `Records.requestParameters.launchConfigurationName` log field value is not empty then, `Records.requestParameters.launchConfigurationName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `PutScalingPolicy` and if the `Records.responseElements.policyARN` log field value is not empty then, `Records.responseElements.policyARN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeAutoScalingGroups` then, Iterate through log field `Records.requestParameters.autoScalingGroupNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.autoScalingGroupNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_launch_configuration_name` and `Records.requestParameters.autoScalingGroupNames` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchConfigurations` then, Iterate through log field `Records.requestParameters.launchConfigurationNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.launchConfigurationNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_launch_configuration_name` and `Records.requestParameters.launchConfigurationNames` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.launchConfigurationNames`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachInstances` `AttachLoadBalancerTargetGroups` `CreateAutoScalingGroup` `DeleteAutoScalingGroup` `DeleteScheduledAction` `DeletePolicy` `DescribeInstanceRefreshes` `DescribeLifecycleHooks` `DescribeLoadBalancerTargetGroups` `DescribeNotificationConfigurations` `DescribePolicies` `DescribeScheduledActions` `DescribeWarmPool` `DetachLoadBalancerTargetGroups` `PutNotificationConfiguration` `PutScheduledUpdateGroupAction` `ResumeProcesses` `SetDesiredCapacity` `StartInstanceRefresh` `SuspendProcesses` `UpdateAutoScalingGroup` and if the `Records.requestParameters.autoScalingGroupName` log field value is not empty then, `Records.requestParameters.autoScalingGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeScalingActivities` `DetachInstances` `TerminateInstanceInAutoScalingGroup` and if the `Records.responseElements.activity.autoScalingGroupName` log field value is not empty then, `Records.responseElements.activity.autoScalingGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateLaunchConfiguration` and if the `Records.requestParameters.launchConfigurationName` log field value is not empty then, `Records.requestParameters.launchConfigurationName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `PutScalingPolicy` and if the `Records.responseElements.policyARN` log field value is not empty then, `Records.responseElements.policyARN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeAutoScalingGroups` then, Iterate through log field `Records.requestParameters.autoScalingGroupNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.autoScalingGroupNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_launch_configuration_name` and `Records.requestParameters.autoScalingGroupNames` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchConfigurations` then, Iterate through log field `Records.requestParameters.launchConfigurationNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.launchConfigurationNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_launch_configuration_name` and `Records.requestParameters.launchConfigurationNames` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.policyARN`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachInstances` `AttachLoadBalancerTargetGroups` `CreateAutoScalingGroup` `DeleteAutoScalingGroup` `DeleteScheduledAction` `DeletePolicy` `DescribeInstanceRefreshes` `DescribeLifecycleHooks` `DescribeLoadBalancerTargetGroups` `DescribeNotificationConfigurations` `DescribePolicies` `DescribeScheduledActions` `DescribeWarmPool` `DetachLoadBalancerTargetGroups` `PutNotificationConfiguration` `PutScheduledUpdateGroupAction` `ResumeProcesses` `SetDesiredCapacity` `StartInstanceRefresh` `SuspendProcesses` `UpdateAutoScalingGroup` and if the `Records.requestParameters.autoScalingGroupName` log field value is not empty then, `Records.requestParameters.autoScalingGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeScalingActivities` `DetachInstances` `TerminateInstanceInAutoScalingGroup` and if the `Records.responseElements.activity.autoScalingGroupName` log field value is not empty then, `Records.responseElements.activity.autoScalingGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateLaunchConfiguration` and if the `Records.requestParameters.launchConfigurationName` log field value is not empty then, `Records.requestParameters.launchConfigurationName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `PutScalingPolicy` and if the `Records.responseElements.policyARN` log field value is not empty then, `Records.responseElements.policyARN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeAutoScalingGroups` then, Iterate through log field `Records.requestParameters.autoScalingGroupNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.autoScalingGroupNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_launch_configuration_name` and `Records.requestParameters.autoScalingGroupNames` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchConfigurations` then, Iterate through log field `Records.requestParameters.launchConfigurationNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.launchConfigurationNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_launch_configuration_name` and `Records.requestParameters.launchConfigurationNames` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.activity.autoScalingGroupName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachInstances` `AttachLoadBalancerTargetGroups` `CreateAutoScalingGroup` `DeleteAutoScalingGroup` `DeleteScheduledAction` `DeletePolicy` `DescribeInstanceRefreshes` `DescribeLifecycleHooks` `DescribeLoadBalancerTargetGroups` `DescribeNotificationConfigurations` `DescribePolicies` `DescribeScheduledActions` `DescribeWarmPool` `DetachLoadBalancerTargetGroups` `PutNotificationConfiguration` `PutScheduledUpdateGroupAction` `ResumeProcesses` `SetDesiredCapacity` `StartInstanceRefresh` `SuspendProcesses` `UpdateAutoScalingGroup` and if the `Records.requestParameters.autoScalingGroupName` log field value is not empty then, `Records.requestParameters.autoScalingGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeScalingActivities` `DetachInstances` `TerminateInstanceInAutoScalingGroup` and if the `Records.responseElements.activity.autoScalingGroupName` log field value is not empty then, `Records.responseElements.activity.autoScalingGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateLaunchConfiguration` and if the `Records.requestParameters.launchConfigurationName` log field value is not empty then, `Records.requestParameters.launchConfigurationName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `PutScalingPolicy` and if the `Records.responseElements.policyARN` log field value is not empty then, `Records.responseElements.policyARN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeAutoScalingGroups` then, Iterate through log field `Records.requestParameters.autoScalingGroupNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.autoScalingGroupNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_launch_configuration_name` and `Records.requestParameters.autoScalingGroupNames` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchConfigurations` then, Iterate through log field `Records.requestParameters.launchConfigurationNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.launchConfigurationNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_launch_configuration_name` and `Records.requestParameters.launchConfigurationNames` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.launchConfigurationName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachInstances` `AttachLoadBalancerTargetGroups` `CreateAutoScalingGroup` `DeleteAutoScalingGroup` `DeleteScheduledAction` `DeletePolicy` `DescribeInstanceRefreshes` `DescribeLifecycleHooks` `DescribeLoadBalancerTargetGroups` `DescribeNotificationConfigurations` `DescribePolicies` `DescribeScheduledActions` `DescribeWarmPool` `DetachLoadBalancerTargetGroups` `PutNotificationConfiguration` `PutScheduledUpdateGroupAction` `ResumeProcesses` `SetDesiredCapacity` `StartInstanceRefresh` `SuspendProcesses` `UpdateAutoScalingGroup` and if the `Records.requestParameters.autoScalingGroupName` log field value is not empty then, `Records.requestParameters.autoScalingGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeScalingActivities` `DetachInstances` `TerminateInstanceInAutoScalingGroup` and if the `Records.responseElements.activity.autoScalingGroupName` log field value is not empty then, `Records.responseElements.activity.autoScalingGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateLaunchConfiguration` and if the `Records.requestParameters.launchConfigurationName` log field value is not empty then, `Records.requestParameters.launchConfigurationName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `PutScalingPolicy` and if the `Records.responseElements.policyARN` log field value is not empty then, `Records.responseElements.policyARN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeAutoScalingGroups` then, Iterate through log field `Records.requestParameters.autoScalingGroupNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.autoScalingGroupNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_launch_configuration_name` and `Records.requestParameters.autoScalingGroupNames` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchConfigurations` then, Iterate through log field `Records.requestParameters.launchConfigurationNames`, then If the `index` value is equal to `0` then, `Records.requestParameters.launchConfigurationNames` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_launch_configuration_name` and `Records.requestParameters.launchConfigurationNames` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.applicationId`	`target.resource.product_object_id`	If the `Records.eventName` log field value contain one of the following values `GetApplication` `GetConfigurationProfile` `GetDeployment` `GetEnvironment` `ListConfigurationProfiles` `ListDeployments` `ListHostedConfigurationVersions` and if the `Records.requestParameters.applicationId` log field value is not empty then, `Records.requestParameters.applicationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CompleteLifecycleAction` `TerminateInstanceInAutoScalingGroup` and if the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeregisterScalableTarget` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeAutoScalingInstances` `DetachInstances` `SetInstanceProtection` then, Iterate through log field `Records.requestParameters.instanceIds`, then If the `index` value is equal to `0` then, `Records.requestParameters.instanceIds` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_instances_ids` and `Records.requestParameters.instanceIds` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeScalableTargets` then, Iterate through log field `Records.requestParameters.resourceIds`, then If the `index` value is equal to `0` then, `Records.requestParameters.resourceIds` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_resource_ids` and `Records.requestParameters.resourceIds` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeScalingActivities` `DescribeScalingPolicies` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.instanceId`	`target.resource.product_object_id`	If the `Records.eventName` log field value contain one of the following values `GetApplication` `GetConfigurationProfile` `GetDeployment` `GetEnvironment` `ListConfigurationProfiles` `ListDeployments` `ListHostedConfigurationVersions` and if the `Records.requestParameters.applicationId` log field value is not empty then, `Records.requestParameters.applicationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CompleteLifecycleAction` `TerminateInstanceInAutoScalingGroup` and if the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeregisterScalableTarget` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeAutoScalingInstances` `DetachInstances` `SetInstanceProtection` then, Iterate through log field `Records.requestParameters.instanceIds`, then If the `index` value is equal to `0` then, `Records.requestParameters.instanceIds` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_instances_ids` and `Records.requestParameters.instanceIds` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeScalableTargets` then, Iterate through log field `Records.requestParameters.resourceIds`, then If the `index` value is equal to `0` then, `Records.requestParameters.resourceIds` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_resource_ids` and `Records.requestParameters.resourceIds` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeScalingActivities` `DescribeScalingPolicies` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.resourceId`	`target.resource.product_object_id`	If the `Records.eventName` log field value contain one of the following values `GetApplication` `GetConfigurationProfile` `GetDeployment` `GetEnvironment` `ListConfigurationProfiles` `ListDeployments` `ListHostedConfigurationVersions` and if the `Records.requestParameters.applicationId` log field value is not empty then, `Records.requestParameters.applicationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CompleteLifecycleAction` `TerminateInstanceInAutoScalingGroup` and if the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeregisterScalableTarget` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeAutoScalingInstances` `DetachInstances` `SetInstanceProtection` then, Iterate through log field `Records.requestParameters.instanceIds`, then If the `index` value is equal to `0` then, `Records.requestParameters.instanceIds` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_instances_ids` and `Records.requestParameters.instanceIds` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeScalableTargets` then, Iterate through log field `Records.requestParameters.resourceIds`, then If the `index` value is equal to `0` then, `Records.requestParameters.resourceIds` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_resource_ids` and `Records.requestParameters.resourceIds` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeScalingActivities` `DescribeScalingPolicies` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.instanceIds`	`target.resource.product_object_id`	If the `Records.eventName` log field value contain one of the following values `GetApplication` `GetConfigurationProfile` `GetDeployment` `GetEnvironment` `ListConfigurationProfiles` `ListDeployments` `ListHostedConfigurationVersions` and if the `Records.requestParameters.applicationId` log field value is not empty then, `Records.requestParameters.applicationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CompleteLifecycleAction` `TerminateInstanceInAutoScalingGroup` and if the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeregisterScalableTarget` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeAutoScalingInstances` `DetachInstances` `SetInstanceProtection` then, Iterate through log field `Records.requestParameters.instanceIds`, then If the `index` value is equal to `0` then, `Records.requestParameters.instanceIds` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_instances_ids` and `Records.requestParameters.instanceIds` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeScalableTargets` then, Iterate through log field `Records.requestParameters.resourceIds`, then If the `index` value is equal to `0` then, `Records.requestParameters.resourceIds` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_resource_ids` and `Records.requestParameters.resourceIds` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeScalingActivities` `DescribeScalingPolicies` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.resourceIds`	`target.resource.product_object_id`	If the `Records.eventName` log field value contain one of the following values `GetApplication` `GetConfigurationProfile` `GetDeployment` `GetEnvironment` `ListConfigurationProfiles` `ListDeployments` `ListHostedConfigurationVersions` and if the `Records.requestParameters.applicationId` log field value is not empty then, `Records.requestParameters.applicationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CompleteLifecycleAction` `TerminateInstanceInAutoScalingGroup` and if the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeregisterScalableTarget` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeAutoScalingInstances` `DetachInstances` `SetInstanceProtection` then, Iterate through log field `Records.requestParameters.instanceIds`, then If the `index` value is equal to `0` then, `Records.requestParameters.instanceIds` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_instances_ids` and `Records.requestParameters.instanceIds` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeScalableTargets` then, Iterate through log field `Records.requestParameters.resourceIds`, then If the `index` value is equal to `0` then, `Records.requestParameters.resourceIds` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_resource_ids` and `Records.requestParameters.resourceIds` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeScalingActivities` `DescribeScalingPolicies` and if the `Records.requestParameters.resourceId` log field value is not empty then, `Records.requestParameters.resourceId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.userData`	`target.user.attribute.labels[req_user_data]`

Field mapping reference: AWS CloudTrail - Security Identity Compliance

The following table lists the log fields for the Security Identity Compliance log type and their corresponding UDM fields.

Log field	UDM mapping	Logic
`Records.requestParameters.maxItems`	`additional.fields[req_max_items]`
`Records.requestParameters.MaxResults`	`additional.fields[req_max_results]`
`Records.requestParameters.maxSessionDuration`	`network.session_duration`
`Records.requestParameters.serialNumber`	`principal.asset.hardware.serial_number`	If the `Records.eventName` log field value is not equal to `DeactivateMFADevice` then, `Records.requestParameters.serialNumber` log field is mapped to the `principal.asset.hardware.serial_number` UDM field.
`Records.requestParameters.Regions`	`security_result.about.resource.attribute.labels[req_regions]`
`Records.requestParameters.Accounts`	`security_result.about.resource.name`	If the `Records.eventName` log field value is equal to `GetInsightResults` and if the `Records.requestParameters.InsightArn` log field value is not empty then, `Records.requestParameters.InsightArn` log field is mapped to the `security_result.about.resource.name` UDM field and the `security_result.about.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListControlEvaluationSummaries` and if the `Records.requestParameters.Accounts` log field value is not empty then, `Records.requestParameters.Accounts` log field is mapped to the `security_result.about.resource.name` UDM field and the `security_result.about.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `BatchEnableStandards` then, Iterate through log field `Records.responseElements.StandardsSubscriptions`, then `Records.responseElements.StandardsSubscriptions.StandardsSubscriptionArn` log field is mapped to the `security_result.about.resource.name` UDM field and the `security_result.about.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.responseElements.assumedRoleUser.arn` log field value is not empty then, `Records.responseElements.assumedRoleUser.arn` log field is mapped to the `security_result.about.resource.name` UDM field and the `security_result.about.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.StandardsSubscriptions.StandardsSubscriptionArn`	`security_result.about.resource.name`	If the `Records.eventName` log field value is equal to `GetInsightResults` and if the `Records.requestParameters.InsightArn` log field value is not empty then, `Records.requestParameters.InsightArn` log field is mapped to the `security_result.about.resource.name` UDM field and the `security_result.about.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListControlEvaluationSummaries` and if the `Records.requestParameters.Accounts` log field value is not empty then, `Records.requestParameters.Accounts` log field is mapped to the `security_result.about.resource.name` UDM field and the `security_result.about.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `BatchEnableStandards` then, Iterate through log field `Records.responseElements.StandardsSubscriptions`, then `Records.responseElements.StandardsSubscriptions.StandardsSubscriptionArn` log field is mapped to the `security_result.about.resource.name` UDM field and the `security_result.about.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.responseElements.assumedRoleUser.arn` log field value is not empty then, `Records.responseElements.assumedRoleUser.arn` log field is mapped to the `security_result.about.resource.name` UDM field and the `security_result.about.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.assumedRoleUser.arn`	`security_result.about.resource.name`	If the `Records.eventName` log field value is equal to `GetInsightResults` and if the `Records.requestParameters.InsightArn` log field value is not empty then, `Records.requestParameters.InsightArn` log field is mapped to the `security_result.about.resource.name` UDM field and the `security_result.about.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListControlEvaluationSummaries` and if the `Records.requestParameters.Accounts` log field value is not empty then, `Records.requestParameters.Accounts` log field is mapped to the `security_result.about.resource.name` UDM field and the `security_result.about.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `BatchEnableStandards` then, Iterate through log field `Records.responseElements.StandardsSubscriptions`, then `Records.responseElements.StandardsSubscriptions.StandardsSubscriptionArn` log field is mapped to the `security_result.about.resource.name` UDM field and the `security_result.about.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.responseElements.assumedRoleUser.arn` log field value is not empty then, `Records.responseElements.assumedRoleUser.arn` log field is mapped to the `security_result.about.resource.name` UDM field and the `security_result.about.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.InsightArn`	`security_result.about.resource.name`	If the `Records.eventName` log field value is equal to `GetInsightResults` and if the `Records.requestParameters.InsightArn` log field value is not empty then, `Records.requestParameters.InsightArn` log field is mapped to the `security_result.about.resource.name` UDM field and the `security_result.about.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListControlEvaluationSummaries` and if the `Records.requestParameters.Accounts` log field value is not empty then, `Records.requestParameters.Accounts` log field is mapped to the `security_result.about.resource.name` UDM field and the `security_result.about.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `BatchEnableStandards` then, Iterate through log field `Records.responseElements.StandardsSubscriptions`, then `Records.responseElements.StandardsSubscriptions.StandardsSubscriptionArn` log field is mapped to the `security_result.about.resource.name` UDM field and the `security_result.about.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.responseElements.assumedRoleUser.arn` log field value is not empty then, `Records.responseElements.assumedRoleUser.arn` log field is mapped to the `security_result.about.resource.name` UDM field and the `security_result.about.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.webAclId`	`security_result.about.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetSampledRequests` and if the `Records.requestParameters.webAclId` log field value is not empty then, `Records.requestParameters.webAclId` log field is mapped to the `security_result.about.resource.product_object_id` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.responseElements.assumedRoleUser` log field value is not empty then, `Records.responseElements.assumedRoleUser.assumedRoleId` log field is mapped to the `security_result.about.resource.product_object_id` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.assumedRoleUser.assumedRoleId`	`security_result.about.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetSampledRequests` and if the `Records.requestParameters.webAclId` log field value is not empty then, `Records.requestParameters.webAclId` log field is mapped to the `security_result.about.resource.product_object_id` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.responseElements.assumedRoleUser` log field value is not empty then, `Records.responseElements.assumedRoleUser.assumedRoleId` log field is mapped to the `security_result.about.resource.product_object_id` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.StandardsControlAssociationUpdates.AssociationStatus`	`security_result.action`	Iterate through log field `Records.requestParameters.StandardsControlAssociationUpdates`, then If the `Records.requestParameters.StandardsControlAssociationUpdates.AssociationStatus` log field value is equal to `ENABLED` then, the `security_result.action` UDM field is set to `ALLOW`. Else, the `security_result.action` UDM field is set to `BLOCK`.
`Records.responseElements.error`	`security_result.description`
`Records.responseElements.StandardsSubscriptions.StandardsInput`	`security_result.detection_fields[key]`	Iterate through log field `Records.responseElements.StandardsSubscriptions`, then Iterate for each key, value pair of log field `Records.responseElements.StandardsSubscriptions.StandardsInput`, then `key` log field is mapped to the `security_result.detection_fields.key` UDM field and `value` log field is mapped to the `security_result.detection_fields.value` UDM field.
`key`	`security_result.detection_fields[key]`	Iterate through log field `Records.responseElements.StandardsSubscriptions`, then Iterate for each key, value pair of log field `Records.responseElements.StandardsSubscriptions.StandardsInput`, then `key` log field is mapped to the `security_result.detection_fields.key` UDM field and `value` log field is mapped to the `security_result.detection_fields.value` UDM field.
`value`	`security_result.detection_fields[key]`	Iterate through log field `Records.responseElements.StandardsSubscriptions`, then Iterate for each key, value pair of log field `Records.responseElements.StandardsSubscriptions.StandardsInput`, then `key` log field is mapped to the `security_result.detection_fields.key` UDM field and `value` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.Aggregations.AggregationField`	`security_result.detection_fields[req_aggregations_aggregation_field]`	Iterate through log field `Records.requestParameters.Aggregations`, then the `security_result.detection_fields.key` UDM field is set to `req_aggregations_aggregation_field` and `Records.requestParameters.Aggregations.AggregationField` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.Aggregations.Filters`	`security_result.detection_fields[req_aggregations_filters]`	Iterate through log field `Records.requestParameters.Aggregations`, then the `security_result.detection_fields.key` UDM field is set to `req_aggregations_filters` and `Records.requestParameters.Aggregations.Filters` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.AutoEnableControls`	`security_result.detection_fields[req_auto_enabled_controls]`
`Records.requestParameters.clientToken`	`security_result.detection_fields[req_client_token]`
`Records.requestParameters.destinationAAD`	`security_result.detection_fields[req_destination_add]`
`Records.requestParameters.destinationEncryptionAlgorithm`	`security_result.detection_fields[req_destination_encryption_algorithm]`
`Records.requestParameters.encryptionAlgorithm`	`security_result.detection_fields[req_encryption_algorithm]`
`Records.requestParameters.encryptionContext.aws:lambda:FunctionArn`	`security_result.detection_fields[req_encryption_context_aws_lambda_function_arn]`
`Records.requestParameters.findingStatisticTypes`	`security_result.detection_fields[req_findings_type]`	Iterate through log field `Records.requestParameters.findingStatisticTypes`, then the `security_result.detection_fields.key` UDM field is set to `req_findings_type` and `Records.requestParameters.findingStatisticTypes` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.jobId`	`security_result.detection_fields[req_job_id]`
`Records.requestParameters.messageType`	`security_result.detection_fields[req_message_type]`
`Records.requestParameters.nextMarker`	`security_result.detection_fields[req_next_marker]`
`Records.requestParameters.NextToken`	`security_result.detection_fields[req_next_token]`
`Records.requestParameters.principalArn`	`security_result.detection_fields[req_principal_arn]`
`Records.requestParameters.sAMLAssertionID`	`security_result.detection_fields[req_s_amlassertion_id]`
`Records.requestParameters.signingAlgorithm`	`security_result.detection_fields[req_signing_algorithm]`
`Records.requestParameters.sourceEncryptionAlgorithm`	`security_result.detection_fields[req_source_encryption_algorithm]`
`Records.requestParameters.updateToken`	`security_result.detection_fields[req_update_token]`
`Records.responseElements.audience`	`security_result.detection_fields[res_audience]`
`Records.responseElements.credentials.sessionToken`	`security_result.detection_fields[res_credentials_session_token]`
`Records.responseElements.packedPolicySize`	`security_result.detection_fields[res_packed_policy_size]`
`Records.responseElements.provider`	`security_result.detection_fields[res_provider]`
`Records.responseElements.subjectFromWebIdentityToken`	`security_result.detection_fields[res_subject_from_web_identity_token]`
`Records.responseElements.subjectType`	`security_result.detection_fields[res_subject_type]`
`Records.responseElements.subject`	`security_result.detection_fields[res_subject]`
`Records.requestParameters.sourceAAD`	`security_result.detection_fields[source_add]`
`Records.responseElements.policy.updateDate`	`security_result.last_updated_time`
`Records.requestParameters.findingIds`	`security_result.outcomes[req_finding_ids]`	Iterate through log field `Records.requestParameters.findingIds`, then the `security_result.outcomes.key` UDM field is set to `req_finding_ids` and `Records.requestParameters.findingIds` log field is mapped to the `security_result.outcomes.value` UDM field.
`Records.requestParameters.StandardsControlAssociationIds.SecurityControlId`	`security_result.rule_id`	If the `Records.eventName` log field value is equal to `BatchGetStandardsControlAssociations` then, Iterate through log field `Records.requestParameters.StandardsControlAssociationIds`, then `Records.requestParameters.StandardsControlAssociationIds.SecurityControlId` log field is mapped to the `security_result.rule_id` UDM field. Else, if the `Records.eventName` log field value is equal to `BatchGetControlEvaluations` then, Iterate through log field `Records.requestParameters.SecurityControlIds`, then `Records.requestParameters.SecurityControlIds` log field is mapped to the `security_result.rule_id` UDM field. Else, if the `Records.eventName` log field value is equal to `BatchUpdateStandardsControlAssociations` then, Iterate through log field `Records.requestParameters.StandardsControlAssociationUpdates`, then `Records.requestParameters.StandardsControlAssociationUpdates.SecurityControlId` log field is mapped to the `security_result.rule_id` UDM field. Else, if the `Records.eventName` log field value is equal to `GetSampledRequests` then, `Records.requestParameters.ruleId` log field is mapped to the `security_result.rule_id` UDM field.
`Records.requestParameters.SecurityControlIds`	`security_result.rule_id`	If the `Records.eventName` log field value is equal to `BatchGetStandardsControlAssociations` then, Iterate through log field `Records.requestParameters.StandardsControlAssociationIds`, then `Records.requestParameters.StandardsControlAssociationIds.SecurityControlId` log field is mapped to the `security_result.rule_id` UDM field. Else, if the `Records.eventName` log field value is equal to `BatchGetControlEvaluations` then, Iterate through log field `Records.requestParameters.SecurityControlIds`, then `Records.requestParameters.SecurityControlIds` log field is mapped to the `security_result.rule_id` UDM field. Else, if the `Records.eventName` log field value is equal to `BatchUpdateStandardsControlAssociations` then, Iterate through log field `Records.requestParameters.StandardsControlAssociationUpdates`, then `Records.requestParameters.StandardsControlAssociationUpdates.SecurityControlId` log field is mapped to the `security_result.rule_id` UDM field. Else, if the `Records.eventName` log field value is equal to `GetSampledRequests` then, `Records.requestParameters.ruleId` log field is mapped to the `security_result.rule_id` UDM field.
`Records.requestParameters.StandardsControlAssociationUpdates.SecurityControlId`	`security_result.rule_id`	If the `Records.eventName` log field value is equal to `BatchGetStandardsControlAssociations` then, Iterate through log field `Records.requestParameters.StandardsControlAssociationIds`, then `Records.requestParameters.StandardsControlAssociationIds.SecurityControlId` log field is mapped to the `security_result.rule_id` UDM field. Else, if the `Records.eventName` log field value is equal to `BatchGetControlEvaluations` then, Iterate through log field `Records.requestParameters.SecurityControlIds`, then `Records.requestParameters.SecurityControlIds` log field is mapped to the `security_result.rule_id` UDM field. Else, if the `Records.eventName` log field value is equal to `BatchUpdateStandardsControlAssociations` then, Iterate through log field `Records.requestParameters.StandardsControlAssociationUpdates`, then `Records.requestParameters.StandardsControlAssociationUpdates.SecurityControlId` log field is mapped to the `security_result.rule_id` UDM field. Else, if the `Records.eventName` log field value is equal to `GetSampledRequests` then, `Records.requestParameters.ruleId` log field is mapped to the `security_result.rule_id` UDM field.
`Records.requestParameters.ruleId`	`security_result.rule_id`	If the `Records.eventName` log field value is equal to `BatchGetStandardsControlAssociations` then, Iterate through log field `Records.requestParameters.StandardsControlAssociationIds`, then `Records.requestParameters.StandardsControlAssociationIds.SecurityControlId` log field is mapped to the `security_result.rule_id` UDM field. Else, if the `Records.eventName` log field value is equal to `BatchGetControlEvaluations` then, Iterate through log field `Records.requestParameters.SecurityControlIds`, then `Records.requestParameters.SecurityControlIds` log field is mapped to the `security_result.rule_id` UDM field. Else, if the `Records.eventName` log field value is equal to `BatchUpdateStandardsControlAssociations` then, Iterate through log field `Records.requestParameters.StandardsControlAssociationUpdates`, then `Records.requestParameters.StandardsControlAssociationUpdates.SecurityControlId` log field is mapped to the `security_result.rule_id` UDM field. Else, if the `Records.eventName` log field value is equal to `GetSampledRequests` then, `Records.requestParameters.ruleId` log field is mapped to the `security_result.rule_id` UDM field.
`Records.requestParameters.timeWindow.endTime`	`security_result.rule_labels[req_time_window_end_time]`
`Records.requestParameters.timeWindow.startTime`	`security_result.rule_labels[req_time_window_start_time]`
`Records.responseElements.StandardsSubscriptions.StandardsStatus`	`security_result.rule_labels[res_standards_subscriptions_standards_status]`	Iterate through log field `Records.responseElements.StandardsSubscriptions`, then the `security_result.rule_labels.key` UDM field is set to `res_standards_subscriptions_standards_status` and `Records.responseElements.StandardsSubscriptions.StandardsStatus` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.StandardsControlAssociationIds.StandardsArn`	`security_result.rule_name`	If the `Records.eventName` log field value is equal to `BatchGetStandardsControlAssociations` then, Iterate through log field `Records.requestParameters.StandardsControlAssociationIds`, then `Records.requestParameters.StandardsControlAssociationIds.StandardsArn` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value is equal to `BatchUpdateStandardsControlAssociations` then, Iterate through log field `Records.requestParameters.StandardsControlAssociationUpdates`, then `Records.requestParameters.StandardsControlAssociationUpdates.StandardsArn` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value is equal to `BatchEnableStandards` then, Iterate through log field `Records.responseElements.StandardsSubscriptions`, then `Records.responseElements.StandardsSubscriptions.StandardsArn` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `ListSecurityControlDefinitions` `ListControlEvaluationSummaries` then, `Records.requestParameters.StandardsArn` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetSampledRequests` then, `Records.requestParameters.ruleMetricName` log field is mapped to the `security_result.rule_name` UDM field.
`Records.requestParameters.StandardsArn`	`security_result.rule_name`	If the `Records.eventName` log field value is equal to `BatchGetStandardsControlAssociations` then, Iterate through log field `Records.requestParameters.StandardsControlAssociationIds`, then `Records.requestParameters.StandardsControlAssociationIds.StandardsArn` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value is equal to `BatchUpdateStandardsControlAssociations` then, Iterate through log field `Records.requestParameters.StandardsControlAssociationUpdates`, then `Records.requestParameters.StandardsControlAssociationUpdates.StandardsArn` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value is equal to `BatchEnableStandards` then, Iterate through log field `Records.responseElements.StandardsSubscriptions`, then `Records.responseElements.StandardsSubscriptions.StandardsArn` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `ListSecurityControlDefinitions` `ListControlEvaluationSummaries` then, `Records.requestParameters.StandardsArn` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetSampledRequests` then, `Records.requestParameters.ruleMetricName` log field is mapped to the `security_result.rule_name` UDM field.
`Records.requestParameters.StandardsControlAssociationUpdates.StandardsArn`	`security_result.rule_name`	If the `Records.eventName` log field value is equal to `BatchGetStandardsControlAssociations` then, Iterate through log field `Records.requestParameters.StandardsControlAssociationIds`, then `Records.requestParameters.StandardsControlAssociationIds.StandardsArn` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value is equal to `BatchUpdateStandardsControlAssociations` then, Iterate through log field `Records.requestParameters.StandardsControlAssociationUpdates`, then `Records.requestParameters.StandardsControlAssociationUpdates.StandardsArn` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value is equal to `BatchEnableStandards` then, Iterate through log field `Records.responseElements.StandardsSubscriptions`, then `Records.responseElements.StandardsSubscriptions.StandardsArn` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `ListSecurityControlDefinitions` `ListControlEvaluationSummaries` then, `Records.requestParameters.StandardsArn` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetSampledRequests` then, `Records.requestParameters.ruleMetricName` log field is mapped to the `security_result.rule_name` UDM field.
`Records.responseElements.StandardsSubscriptions.StandardsArn`	`security_result.rule_name`	If the `Records.eventName` log field value is equal to `BatchGetStandardsControlAssociations` then, Iterate through log field `Records.requestParameters.StandardsControlAssociationIds`, then `Records.requestParameters.StandardsControlAssociationIds.StandardsArn` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value is equal to `BatchUpdateStandardsControlAssociations` then, Iterate through log field `Records.requestParameters.StandardsControlAssociationUpdates`, then `Records.requestParameters.StandardsControlAssociationUpdates.StandardsArn` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value is equal to `BatchEnableStandards` then, Iterate through log field `Records.responseElements.StandardsSubscriptions`, then `Records.responseElements.StandardsSubscriptions.StandardsArn` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `ListSecurityControlDefinitions` `ListControlEvaluationSummaries` then, `Records.requestParameters.StandardsArn` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetSampledRequests` then, `Records.requestParameters.ruleMetricName` log field is mapped to the `security_result.rule_name` UDM field.
`Records.requestParameters.ruleMetricName`	`security_result.rule_name`	If the `Records.eventName` log field value is equal to `BatchGetStandardsControlAssociations` then, Iterate through log field `Records.requestParameters.StandardsControlAssociationIds`, then `Records.requestParameters.StandardsControlAssociationIds.StandardsArn` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value is equal to `BatchUpdateStandardsControlAssociations` then, Iterate through log field `Records.requestParameters.StandardsControlAssociationUpdates`, then `Records.requestParameters.StandardsControlAssociationUpdates.StandardsArn` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value is equal to `BatchEnableStandards` then, Iterate through log field `Records.responseElements.StandardsSubscriptions`, then `Records.responseElements.StandardsSubscriptions.StandardsArn` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `ListSecurityControlDefinitions` `ListControlEvaluationSummaries` then, `Records.requestParameters.StandardsArn` log field is mapped to the `security_result.rule_name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetSampledRequests` then, `Records.requestParameters.ruleMetricName` log field is mapped to the `security_result.rule_name` UDM field.
`Records.requestParameters.StandardsControlAssociationUpdates.UpdatedReason`	`security_result.summary`	Iterate through log field `Records.requestParameters.StandardsControlAssociationUpdates`, then `Records.requestParameters.StandardsControlAssociationUpdates.UpdatedReason` log field is mapped to the `security_result.summary` UDM field.
`Records.requestParameters.aWSServiceName`	`target.application`	If the `Records.eventName` log field value is equal to `ListServiceSpecificCredentials` then, `Records.requestParameters.serviceName` log field is mapped to the `target.application` UDM field. Else, `Records.requestParameters.aWSServiceName` log field is mapped to the `target.application` UDM field.
`Records.requestParameters.serviceName`	`target.application`	If the `Records.eventName` log field value is equal to `ListServiceSpecificCredentials` then, `Records.requestParameters.serviceName` log field is mapped to the `target.application` UDM field. Else, `Records.requestParameters.aWSServiceName` log field is mapped to the `target.application` UDM field.
`Records.responseElements.group.path`	`target.group.attribute.labels[res_group_path]`
`Records.responseElements.group.createDate`	`target.group.creation_time`
`Records.requestParameters.groupName`	`target.group.group_display_name`	If the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.groupName` log field value is not empty then, `Records.responseElements.group.groupName` log field is mapped to the `target.group.group_display_name` UDM field. Else, `Records.requestParameters.groupName` log field is mapped to the `target.group.group_display_name` UDM field. Else, `Records.requestParameters.groupName` log field is mapped to the `target.group.group_display_name` UDM field.
`Records.responseElements.group.groupName`	`target.group.group_display_name`	If the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.groupName` log field value is not empty then, `Records.responseElements.group.groupName` log field is mapped to the `target.group.group_display_name` UDM field. Else, `Records.requestParameters.groupName` log field is mapped to the `target.group.group_display_name` UDM field. Else, `Records.requestParameters.groupName` log field is mapped to the `target.group.group_display_name` UDM field.
`Records.responseElements.group.groupId`	`target.group.product_object_id`
`Records.responseElements.grantId`	`target.resource.attribute.labels[req_grant_id]`
`Records.responseElements.keyMetadata.keyManager`	`target.resource_ancestors.attribute.labels[res_key_metadata_key_manager]`
`Records.requestParameters.policyArns.arn`	`target.resource_ancestors.name`	If the `Records.eventName` log field value is equal to `AssumeRole` then, Iterate through log field `Records.requestParameters.policyArns`, then `Records.requestParameters.policyArns.arn` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.arn` log field value is not empty then, `Records.responseElements.instanceProfile.arn` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.instanceProfile.arn`	`target.resource_ancestors.name`	If the `Records.eventName` log field value is equal to `AssumeRole` then, Iterate through log field `Records.requestParameters.policyArns`, then `Records.requestParameters.policyArns.arn` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.arn` log field value is not empty then, `Records.responseElements.instanceProfile.arn` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.detectorId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value contain one of the following values `DescribePublishingDestination` `CreatePublishingDestination` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.aWSAccountId` log field value is not empty then, `Records.responseElements.keyMetadata.aWSAccountId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateSecret` and if the `Records.requestParameters.kmsKeyId` log field value is not empty then, `Records.requestParameters.kmsKeyId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `CREDENTIAL` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.keyMetadata.aWSAccountId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value contain one of the following values `DescribePublishingDestination` `CreatePublishingDestination` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.aWSAccountId` log field value is not empty then, `Records.responseElements.keyMetadata.aWSAccountId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateSecret` and if the `Records.requestParameters.kmsKeyId` log field value is not empty then, `Records.requestParameters.kmsKeyId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `CREDENTIAL` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.kmsKeyId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value contain one of the following values `DescribePublishingDestination` `CreatePublishingDestination` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.aWSAccountId` log field value is not empty then, `Records.responseElements.keyMetadata.aWSAccountId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `CLOUD_PROJECT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateSecret` and if the `Records.requestParameters.kmsKeyId` log field value is not empty then, `Records.requestParameters.kmsKeyId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `CREDENTIAL` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.keyMetadata.creationDate`	`target.resource.attribute.creation_time`	If the `Records.eventName` log field value is equal to `CreateKey` then, `Records.responseElements.keyMetadata.creationDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateAccessKey` then, `Records.responseElements.accessKey.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` then, `Records.responseElements.instanceProfile.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` then, `Records.responseElements.policy.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreatePolicyVersion` then, `Records.responseElements.policyVersion.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRole` then, `Records.responseElements.role.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field.
`Records.responseElements.accessKey.createDate`	`target.resource.attribute.creation_time`	If the `Records.eventName` log field value is equal to `CreateKey` then, `Records.responseElements.keyMetadata.creationDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateAccessKey` then, `Records.responseElements.accessKey.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` then, `Records.responseElements.instanceProfile.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` then, `Records.responseElements.policy.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreatePolicyVersion` then, `Records.responseElements.policyVersion.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRole` then, `Records.responseElements.role.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field.
`Records.responseElements.instanceProfile.createDate`	`target.resource.attribute.creation_time`	If the `Records.eventName` log field value is equal to `CreateKey` then, `Records.responseElements.keyMetadata.creationDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateAccessKey` then, `Records.responseElements.accessKey.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` then, `Records.responseElements.instanceProfile.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` then, `Records.responseElements.policy.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreatePolicyVersion` then, `Records.responseElements.policyVersion.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRole` then, `Records.responseElements.role.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field.
`Records.responseElements.policy.createDate`	`target.resource.attribute.creation_time`	If the `Records.eventName` log field value is equal to `CreateKey` then, `Records.responseElements.keyMetadata.creationDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateAccessKey` then, `Records.responseElements.accessKey.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` then, `Records.responseElements.instanceProfile.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` then, `Records.responseElements.policy.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreatePolicyVersion` then, `Records.responseElements.policyVersion.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRole` then, `Records.responseElements.role.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field.
`Records.responseElements.policyVersion.createDate`	`target.resource.attribute.creation_time`	If the `Records.eventName` log field value is equal to `CreateKey` then, `Records.responseElements.keyMetadata.creationDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateAccessKey` then, `Records.responseElements.accessKey.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` then, `Records.responseElements.instanceProfile.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` then, `Records.responseElements.policy.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreatePolicyVersion` then, `Records.responseElements.policyVersion.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRole` then, `Records.responseElements.role.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field.
`Records.responseElements.role.createDate`	`target.resource.attribute.creation_time`	If the `Records.eventName` log field value is equal to `CreateKey` then, `Records.responseElements.keyMetadata.creationDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateAccessKey` then, `Records.responseElements.accessKey.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` then, `Records.responseElements.instanceProfile.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` then, `Records.responseElements.policy.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreatePolicyVersion` then, `Records.responseElements.policyVersion.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRole` then, `Records.responseElements.role.createDate` log field is mapped to the `target.resource.attribute.creation_time` UDM field.
`Records.additionalEventData.ARN`	`target.resource.attribute.labels[additional_event_data_arn]`
`Records.additionalEventData.grantId`	`target.resource.attribute.labels[additional_event_data_grant_id]`
`Records.additionalEventData.Name`	`target.resource.attribute.labels[additional_event_data_name]`
`Records.requestParameters.clientRequestToken`	`target.resource.attribute.labels[client_request_token]`
`Records.requestParameters.forceOverwriteReplicaSecret`	`target.resource.attribute.labels[force_overwrite_replica_secret]`
`Records.requestParameters.keySpec`	`target.resource.attribute.labels[key_spec]`
`Records.requestParameters.onlyAssociated`	`target.resource.attribute.labels[only_associated]`
`Records.requestParameters.accountDetails.accountId`	`target.resource.attribute.labels[req_account_details_account_id]`	Iterate through log field `Records.requestParameters.accountDetails`, then the `target.resource.attribute.labels.key` UDM field is set to `req_account_details_account_id` and `Records.requestParameters.accountDetails.accountId` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.accountDetails.email`	`target.resource.attribute.labels[req_account_details_email]`	Iterate through log field `Records.requestParameters.accountDetails`, then the `target.resource.attribute.labels.key` UDM field is set to `req_account_details_email` and `Records.requestParameters.accountDetails.email` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.accountIds`	`target.resource.attribute.labels[req_account_ids]`	Iterate through log field `Records.requestParameters.accountIds`, then the `target.resource.attribute.labels.key` UDM field is set to `req_account_ids` and `Records.requestParameters.accountIds` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.actionNames`	`target.resource.attribute.labels[req_action_names]`	Iterate through log field `Records.requestParameters.actionNames`, then the `target.resource.attribute.labels.key` UDM field is set to `req_action_names` and `Records.requestParameters.actionNames` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.addresses`	`target.resource.attribute.labels[req_addresses]`	Iterate through log field `Records.requestParameters.addresses`, then the `target.resource.attribute.labels.key` UDM field is set to `req_addresses` and `Records.requestParameters.addresses` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.analyzeRuleGroup`	`target.resource.attribute.labels[req_analyze_rule_group]`
`Records.requestParameters.assignmentStatus`	`target.resource.attribute.labels[req_assignment_status]`
`Records.requestParameters.autoEnableOrganizationMembers`	`target.resource.attribute.labels[req_auto_enable_organization_members]`
`Records.requestParameters.bypassPolicyLockoutSafetyCheck`	`target.resource.attribute.labels[req_by_pass_policy_lockput_safety_check]`
`Records.requestParameters.clientIDList`	`target.resource.attribute.labels[req_client_idlist]`	Iterate through log field `Records.requestParameters.clientIDList`, then the `target.resource.attribute.labels.key` UDM field is set to `req_client_idlist` and `Records.requestParameters.clientIDList` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.consoleOnly`	`target.resource.attribute.labels[req_console_only]`
`Records.requestParameters.description`	`target.resource.attribute.labels[req_description]`	If the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` then, `Records.requestParameters.description` log field is mapped to the `target.resource.attribute.roles.description` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_description` and `Records.requestParameters.description` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.destinationProperties.kmsKeyArn`	`target.resource.attribute.labels[req_destination_properties_kms_arn]`
`Records.requestParameters.destinationType`	`target.resource.attribute.labels[req_destination_type]`
`Records.requestParameters.dryRun`	`target.resource.attribute.labels[req_dry_run]`
`Records.requestParameters.durationSeconds`	`target.resource.attribute.labels[req_duration_seconds]`
`Records.requestParameters.enable`	`target.resource.attribute.labels[req_enable]`
`Records.requestParameters.entityFilter`	`target.resource.attribute.labels[req_entity_filter]`
`Records.requestParameters.excludeCharacters`	`target.resource.attribute.labels[req_exclude_characters]`
`Records.requestParameters.externalId`	`target.resource.attribute.labels[req_external_id]`
`Records.requestParameters.features.autoEnable`	`target.resource.attribute.labels[req_features_auto_enable]`	Iterate through log field `Records.requestParameters.features`, then the `target.resource.attribute.labels.key` UDM field is set to `req_features_auto_enable` and `Records.requestParameters.features.autoEnable` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.features.name`	`target.resource.attribute.labels[req_features_name]`	Iterate through log field `Records.requestParameters.features`, then the `target.resource.attribute.labels.key` UDM field is set to `req_features_name` and `Records.requestParameters.features.name` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.filter`	`target.resource.attribute.labels[req_filter]`	Iterate through log field `Records.requestParameters.filter`, then the `target.resource.attribute.labels.key` UDM field is set to `req_filter` and `Records.requestParameters.filter` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.filters.key`	`target.resource.attribute.labels[req_filters_key]`	Iterate through log field `Records.requestParameters.filters`, then the `target.resource.attribute.labels.key` UDM field is set to `req_filters_key` and `Records.requestParameters.filters.key` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.filters.values`	`target.resource.attribute.labels[req_filters_values]`	Iterate through log field `Records.requestParameters.filters`, then Iterate through log field `Records.requestParameters.filters.values`, then the `target.resource.attribute.labels.key` UDM field is set to `req_filters_values` and `Records.requestParameters.filters.values` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.findingCriteria.criterion.resource.resourceType.eq`	`target.resource.attribute.labels[req_finding_criteria_criterion_resource_resource_type_eq]`	Iterate through log field `Records.requestParameters.findingCriteria.criterion.resource.resourceType.eq`, then the `target.resource.attribute.labels.key` UDM field is set to `req_finding_criteria_criterion_resource_resource_type_eq` and `Records.requestParameters.findingCriteria.criterion.resource.resourceType.eq` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.findingCriteria.criterion.service.archived.eq`	`target.resource.attribute.labels[req_finding_criteria_criterion_service_archived_eq]`	Iterate through log field `Records.requestParameters.findingCriteria.criterion.service.archived.eq`, then the `target.resource.attribute.labels.key` UDM field is set to `req_finding_criteria_criterion_service_archived_eq` and `Records.requestParameters.findingCriteria.criterion.service.archived.eq` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.findingCriteria.criterion.updatedAt.greaterThanOrEqual`	`target.resource.attribute.labels[req_finding_criteria_criterion_updated_at_greater_than_or_equal]`
`Records.requestParameters.findingCriteria.criterion.updatedAt.gt`	`target.resource.attribute.labels[req_finding_criteria_criterion_updated_at_gt]`
`Records.requestParameters.findingCriteria.criterion.updatedAt.gte`	`target.resource.attribute.labels[req_finding_criteria_criterion_updated_at_gte]`
`Records.requestParameters.findingCriteria.criterion.updatedAt.lt`	`target.resource.attribute.labels[req_finding_criteria_criterion_updated_at_lt]`
`Records.requestParameters.findingCriteria.criterion.severity.gte`	`target.resource.attribute.labels[req_findings_criteria_criterion_severity_get]`
`Records.requestParameters.granularity`	`target.resource.attribute.labels[req_granularity]`
`Records.requestParameters.iPAddressVersion`	`target.resource.attribute.labels[req_i_paddress_version]`
`Records.requestParameters.includePlannedDeletion`	`target.resource.attribute.labels[req_include_planned_deletion]`
`Records.requestParameters.includeSpace`	`target.resource.attribute.labels[req_include_space]`
`Records.requestParameters.limit`	`target.resource.attribute.labels[req_limit]`
`Records.requestParameters.lockToken`	`target.resource.attribute.labels[req_lock_token]`
`Records.requestParameters.managedType`	`target.resource.attribute.labels[req_managed_type]`
`Records.requestParameters.marker`	`target.resource.attribute.labels[req_marker]`
`Records.requestParameters.maxResults`	`target.resource.attribute.labels[req_max_results]`
`Records.requestParameters.moveToVersionId`	`target.resource.attribute.labels[req_move_to_version_id]`
`Records.requestParameters.name`	`target.resource.attribute.labels[req_name]`	If the `Records.eventName` log field value does not contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` then, the `target.resource.attribute.labels.key` UDM field is set to `req_name` and `Records.requestParameters.name` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.nextToken`	`target.resource.attribute.labels[req_next_token]`
`Records.requestParameters.numberOfBytes`	`target.resource.attribute.labels[req_number_of_bytes]`
`Records.requestParameters.omitted`	`target.resource.attribute.labels[req_omitted]`
`Records.requestParameters.onlyAttached`	`target.resource.attribute.labels[req_only_attached]`
`Records.requestParameters.operations`	`target.resource.attribute.labels[req_operations]`	Iterate through log field `Records.requestParameters.operations`, then the `target.resource.attribute.labels.key` UDM field is set to `req_operations` and `Records.requestParameters.operations` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.originalSize`	`target.resource.attribute.labels[req_original_size]`
`Records.requestParameters.passwordLength`	`target.resource.attribute.labels[req_password_length]`
`Records.requestParameters.pathPrefix`	`target.resource.attribute.labels[req_path_prefix]`
`Records.requestParameters.platform`	`target.resource.attribute.labels[req_platform]`
`Records.requestParameters.policyDocument`	`target.resource.attribute.labels[req_policy_document]`
`Records.requestParameters.policyName`	`target.resource.attribute.labels[req_policy_name]`	If the `Records.eventName` log field value does not contain one of the following values `CreatePolicy` `GetGroupPolicy` then, the `target.resource.attribute.labels.key` UDM field is set to `req_policy_name` and `Records.requestParameters.policyName` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.policyUsageFilter`	`target.resource.attribute.labels[req_policy_usage_filter]`
`Records.requestParameters.policy`	`target.resource.attribute.labels[req_policy]`
`Records.requestParameters.reason`	`target.resource.attribute.labels[req_reason]`
`Records.requestParameters.regionFilter`	`target.resource.attribute.labels[req_region_filter]`	Iterate through log field `Records.requestParameters.regionFilter`, then the `target.resource.attribute.labels.key` UDM field is set to `req_region_filter` and `Records.requestParameters.regionFilter` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.removeFromVersionId`	`target.resource.attribute.labels[req_remove_from_version_id]`
`Records.requestParameters.requestPayer`	`target.resource.attribute.labels[req_request_payer]`
`Records.requestParameters.retiringPrincipal`	`target.resource.attribute.labels[req_retiring_principal]`
`Records.requestParameters.roleSessionName`	`target.resource.attribute.labels[req_role_session_name]`
`Records.requestParameters.ruleGroupArn`	`target.resource.attribute.labels[req_rule_group_arn]`
`Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.protocols`	`target.resource.attribute.labels[req_rgr_ssr_and_ca_stateless_rules_rule_definition_match_attributes_protocols]`	Iterate through log field `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules`, then Iterate through log field `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.protocols`, then the `target.resource.attribute.labels.key` UDM field is set to `req_rgr_ssr_and_ca_stateless_rules_rule_definition_match_attributes_protocols` and `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.protocols` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.priority`	`target.resource.attribute.labels[req_rgr_ssr_and_ca_stateless_rules_priority]`	Iterate through log field `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules`, then the `target.resource.attribute.labels.key` UDM field is set to `req_rgr_ssr_and_ca_stateless_rules_priority` and `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.priority` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.actions`	`target.resource.attribute.labels[req_rgr_ssr_and_ca_stateless_rules_rule_definition_actions]`	Iterate through log field `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules`, then Iterate through log field `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.actions`, then the `target.resource.attribute.labels.key` UDM field is set to `req_rgr_ssr_and_ca_stateless_rules_rule_definition_actions` and `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.actions` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.destinationPorts.fromPort`	`target.resource.attribute.labels[req_rgr_ssr_and_ca_stateless_rules_rule_definition_match_attributes_destination_ports_from_port]`	Iterate through log field `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules`, then Iterate through log field `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.destinationPorts`, then the `target.resource.attribute.labels.key` UDM field is set to `req_rgr_ssr_and_ca_stateless_rules_rule_definition_match_attributes_destination_ports_from_port` and `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.destinationPorts.fromPort` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.destinationPorts.toPort`	`target.resource.attribute.labels[req_rgr_ssr_and_ca_stateless_rules_rule_definition_match_attributes_destination_ports_to_port]`	Iterate through log field `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules`, then Iterate through log field `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.destinationPorts`, then the `target.resource.attribute.labels.key` UDM field is set to `req_rgr_ssr_and_ca_stateless_rules_rule_definition_match_attributes_destination_ports_to_port` and `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.destinationPorts.toPort` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.destinations.addressDefinition`	`target.resource.attribute.labels[req_rgr_ssr_and_ca_stateless_rules_rule_definition_match_attributes_destinations_address_definition]`	Iterate through log field `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules`, then Iterate through log field `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.destinations`, then the `target.resource.attribute.labels.key` UDM field is set to `req_rgr_ssr_and_ca_stateless_rules_rule_definition_match_attributes_destinations_address_definition` and `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.destinations.addressDefinition` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.sourcePorts.fromPort`	`target.resource.attribute.labels[req_rgr_ssr_and_ca_stateless_rules_rule_definition_match_attributes_source_ports_from_port]`	Iterate through log field `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules`, then Iterate through log field `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.sourcePorts`, then the `target.resource.attribute.labels.key` UDM field is set to `req_rgr_ssr_and_ca_stateless_rules_rule_definition_match_attributes_source_ports_from_port` and `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.sourcePorts.fromPort` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.sourcePorts.toPort`	`target.resource.attribute.labels[req_rgr_ssr_and_ca_stateless_rules_rule_definition_match_attributes_source_ports_to_port]`	Iterate through log field `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules`, then Iterate through log field `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.sourcePorts`, then the `target.resource.attribute.labels.key` UDM field is set to `req_rgr_ssr_and_ca_stateless_rules_rule_definition_match_attributes_source_ports_to_port` and `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.sourcePorts.toPort` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.sources.addressDefinition`	`target.resource.attribute.labels[req_rgr_ssr_and_ca_stateless_rules_rule_definition_match_attributes_sources_address_definition]`	Iterate through log field `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules`, then Iterate through log field `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.sources`, then the `target.resource.attribute.labels.key` UDM field is set to `req_rgr_ssr_and_ca_stateless_rules_rule_definition_match_attributes_sources_address_definition` and `Records.requestParameters.ruleGroup.rulesSource.statelessRulesAndCustomActions.statelessRules.ruleDefinition.matchAttributes.sources.addressDefinition` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.sAMLMetadataDocument`	`target.resource.attribute.labels[req_saml_metadata_document]`
`Records.requestParameters.scope`	`target.resource.attribute.labels[req_scope]`
`Records.requestParameters.serviceNamespaces`	`target.resource.attribute.labels[req_service_namespaces]`	Iterate through log field `Records.requestParameters.serviceNamespaces`, then the `target.resource.attribute.labels.key` UDM field is set to `req_service_namespaces` and `Records.requestParameters.serviceNamespaces` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.setAsDefault`	`target.resource.attribute.labels[req_set_as_default]`
`Records.requestParameters.silentNotFound`	`target.resource.attribute.labels[req_silent_not_found]`
`Records.requestParameters.sortCriteria.attributeName`	`target.resource.attribute.labels[req_sort_criteria_attribute_name]`
`Records.requestParameters.sortCriteria.orderBy`	`target.resource.attribute.labels[req_sort_criteria_order_by]`
`Records.requestParameters.sortOrder`	`target.resource.attribute.labels[req_sort_order]`
`Records.requestParameters.status`	`target.resource.attribute.labels[req_status]`
`Records.requestParameters.thumbprintList`	`target.resource.attribute.labels[req_thumbprint_list]`	Iterate through log field `Records.requestParameters.thumbprintList`, then the `target.resource.attribute.labels.key` UDM field is set to `req_thumbprint_list` and `Records.requestParameters.thumbprintList` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.type`	`target.resource.attribute.labels[req_type]`
`Records.requestParameters.url`	`target.resource.attribute.labels[req_url]`
`Records.requestParameters.vendorName`	`target.resource.attribute.labels[req_vendor_name]`
`Records.requestParameters.versionId`	`target.resource.attribute.labels[req_version_id]`
`Records.requestParameters.versionStage`	`target.resource.attribute.labels[req_version_stage]`
`Records.requestParameters.versionStages`	`target.resource.attribute.labels[req_version_stages]`	Iterate through log field `Records.requestParameters.versionStages`, then the `target.resource.attribute.labels.key` UDM field is set to `req_version_stages` and `Records.requestParameters.versionStages` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.virtualMFADeviceName`	`target.resource.attribute.labels[req_virtual_mfadevice_name]`
`Records.requestParameters.visibilityConfig.cloudWatchMetricsEnabled`	`target.resource.attribute.labels[req_visibility_config_cloud_watch_metrics_enabled]`
`Records.requestParameters.visibilityConfig.metricName`	`target.resource.attribute.labels[req_visibility_config_metric_name]`
`Records.requestParameters.visibilityConfig.sampledRequestsEnabled`	`target.resource.attribute.labels[req_visibility_config_sampled_requests_enabled]`
`Records.responseElements.accessKey.status`	`target.resource.attribute.labels[res_access_key_status]`
`Records.responseElements.credentials.expiration`	`target.resource.attribute.labels[res_credentials_expiration]`
`Records.responseElements.deletionDate`	`target.resource.attribute.labels[res_deletion_date]`
`Records.responseElements.instanceProfile.path`	`target.resource.attribute.labels[res_instance_profile_path]`
`Records.responseElements.issuer`	`target.resource.attribute.labels[res_issuer]`
`Records.responseElements.keyMetadata.customerMasterKeySpec`	`target.resource.attribute.labels[res_key_metadata_customer_master_key_spec]`
`Records.responseElements.keyMetadata.description`	`target.resource.attribute.labels[res_key_metadata_description]`
`Records.responseElements.keyMetadata.enabled`	`target.resource.attribute.labels[res_key_metadata_enabled]`
`Records.responseElements.keyMetadata.encryptionAlgorithms`	`target.resource.attribute.labels[res_key_metadata_encryption_algorithms]`	Iterate through log field `Records.responseElements.keyMetadata.encryptionAlgorithms`, then the `target.resource.attribute.labels.key` UDM field is set to `res_key_metadata_encryption_algorithms` and `Records.responseElements.keyMetadata.encryptionAlgorithms` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.keyMetadata.keySpec`	`target.resource.attribute.labels[res_key_metadata_key_spec]`
`Records.responseElements.keyMetadata.keyState`	`target.resource.attribute.labels[res_key_metadata_key_state]`
`Records.responseElements.keyMetadata.keyUsage`	`target.resource.attribute.labels[res_key_metadata_key_usage]`
`Records.responseElements.keyMetadata.multiRegion`	`target.resource.attribute.labels[res_key_metadata_multi_region]`
`Records.responseElements.keyMetadata.origin`	`target.resource.attribute.labels[res_key_metadata_origin]`
`Records.responseElements.keyState`	`target.resource.attribute.labels[res_key_state]`
`Records.responseElements.nameQualifier`	`target.resource.attribute.labels[res_name_qualifier]`
`Records.responseElements.name`	`target.resource.attribute.labels[res_name]`
`Records.responseElements.nextLockToken`	`target.resource.attribute.labels[res_next_lock_token]`
`Records.responseElements.pendingWindowInDays`	`target.resource.attribute.labels[res_pending_window_in_days]`
`Records.responseElements.policy.attachmentCount`	`target.resource.attribute.labels[res_policy_attachment_count]`
`Records.responseElements.policy.defaultVersionId`	`target.resource.attribute.labels[res_policy_default_version_id]`
`Records.responseElements.policy.isAttachable`	`target.resource.attribute.labels[res_policy_is_attachable]`
`Records.responseElements.policy.path`	`target.resource.attribute.labels[res_policy_path]`	If the `Records.responseElements.policy.path` log field value is not empty then, the `target.resource.attribute.labels.key` UDM field is set to `res_policy_path` and `Records.responseElements.policy.path` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `res_path` and `Records.requestParameters.path` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.path`	`target.resource.attribute.labels[res_policy_path]`	If the `Records.responseElements.policy.path` log field value is not empty then, the `target.resource.attribute.labels.key` UDM field is set to `res_policy_path` and `Records.responseElements.policy.path` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `res_path` and `Records.requestParameters.path` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.policy.permissionsBoundaryUsageCount`	`target.resource.attribute.labels[res_policy_permissions_boundary_usage_count]`
`Records.responseElements.policy.tags.key`	`target.resource.attribute.labels[res_policy_tags_key]`	Iterate through log field `Records.responseElements.policy.tags.key`, then `Records.responseElements.policy.tags.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.policy.tags.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.policy.tags.value`	`target.resource.attribute.labels[res_policy_tags_key]`	Iterate through log field `Records.responseElements.policy.tags.key`, then `Records.responseElements.policy.tags.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.policy.tags.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.policyVersion.versionId`	`target.resource.attribute.labels[res_policy_version_version_id]`
`Records.responseElements.role.assumeRolePolicyDocument`	`target.resource.attribute.labels[res_role_assume_role_policy_document]`
`Records.responseElements.role.path`	`target.resource.attribute.labels[res_role_path]`
`Records.responseElements.role.tags.key`	`target.resource.attribute.labels[res_role_tags_key]`	Iterate through log field `Records.responseElements.role.tags`, then `Records.responseElements.role.tags.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.role.tags.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.role.tags.value`	`target.resource.attribute.labels[res_role_tags_key]`	Iterate through log field `Records.responseElements.role.tags`, then `Records.responseElements.role.tags.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.role.tags.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.summary.description`	`target.resource.attribute.labels[res_summary_description]`
`Records.responseElements.summary.lockToken`	`target.resource.attribute.labels[res_summary_lock_token]`
`Records.responseElements.summary.name`	`target.resource.attribute.labels[res_summary_name]`
`Records.responseElements.tags.key`	`target.resource.attribute.labels[res_tags_key]`	Iterate through log field `Records.responseElements.tags`, then `Records.responseElements.tags.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.tags.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.tags.value`	`target.resource.attribute.labels[res_tags_key]`	Iterate through log field `Records.responseElements.tags`, then `Records.responseElements.tags.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.tags.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.role.roleName`	`target.resource.attribute.roles.name`
`Records.requestParameters.destinationProperties.destinationArn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.resourceArn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.granteePrincipal`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.aliasName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.keyMetadata.arn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.ruleGroupName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.arn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.summary.aRN`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.name`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.webACLArn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.roleArn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.instanceProfileName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.policyArn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.group.arn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.instanceProfile.instanceProfileName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.openIDConnectProviderArn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.policy.arn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.role.arn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.sAMLProviderArn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.virtualMFADevice.serialNumber`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.serialNumber`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.arn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.openIDConnectProviderArn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.policyName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.sAMLProviderArn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.policySourceArn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElement.Arn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListTagsForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGrant` and if the `Records.requestParameters.granteePrincipal` log field value is not empty then, `Records.requestParameters.granteePrincipal` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.aliasName` log field value is not empty then, `Records.requestParameters.aliasName` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.arn` log field value is not empty then, `Records.responseElements.keyMetadata.arn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListFirewalls` `UpdateRuleGroup` `DescribeRuleGroupMetadata` and if the `Records.requestParameters.ruleGroupName` log field value is not empty then, `Records.requestParameters.ruleGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSecret` `PutSecretValue` `UpdateSecretVersionStage` and if the `Records.responseElements.arn` log field value is not empty then, `Records.responseElements.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetLoggingConfiguration` `DisassociateWebACL` `GetWebACLForResource` and if the `Records.requestParameters.resourceArn` log field value is not empty then, `Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.aRN` log field value is not empty then, `Records.responseElements.summary.aRN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `UpdateWebACL` `DescribeManagedRuleGroup` `ListAvailableManagedRuleGroupVersions` and if the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListResourcesForWebACL` and if the `Records.requestParameters.webACLArn` log field value is not empty then, `Records.requestParameters.webACLArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssumeRole` and if the `Records.requestParameters.roleArn` log field value is not empty then, `Records.requestParameters.roleArn` log field is mapped to the `target.resource.name` UDM field and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetCallerIdentity` and if the `Records.responseElements.Arn` log field value is not empty then, `Records.responseElement.Arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AddRoleToInstanceProfile` `CreateInstanceProfile` `DeleteInstanceProfile` `RemoveRoleFromInstanceProfile` and if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileName` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.instanceProfileName` log field value is not empty then, `Records.requestParameters.instanceProfileName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachGroupPolicy` `AttachRolePolicy` `AttachUserPolicy` `CreatePolicyVersion` `DeletePolicy` `DeletePolicyVersion` `DetachRolePolicy` `DetachUserPolicy` `ListEntitiesForPolicy` `ListPolicyVersions` and if the `Records.requestParameters.policyArn` log field value is not empty then, `Records.requestParameters.policyArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateGroup` and if the `Records.responseElements.group.arn` log field value is not empty then, `Records.responseElements.group.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateOpenIDConnectProvider` and if the `Records.responseElements.openIDConnectProviderArn` log field value is not empty then, `Records.responseElements.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePolicy` `GetGroupPolicy` `GetPolicy` `GetPolicyVersion` `GetRolePolicy` `PutRolePolicy` `PutUserPolicy` and if the `Records.responseElements.policy.arn` log field value is not empty then, `Records.responseElements.policy.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.policyName` log field value is not empty then, `Records.requestParameters.policyName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` `ListRolePolicies` and if the `Records.responseElement.role.arn` log field value is not empty then, `Records.responseElements.role.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSAMLProvider` `GetSAMLProvider` `ListSAMLProviderTags` `UpdateSAMLProvider` and if the `Records.responseElement.sAMLProviderArn` log field value is not empty then, `Records.responseElements.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.sAMLProviderArn` log field value is not empty then, `Records.requestParameters.sAMLProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateVirtualMFADevice` `DeleteVirtualMFADevice` `EnableMFADevice` `ResyncMFADevice` `DeactivateMFADevice` and if the `Records.responseElements.virtualMFADevice.serialNumber` log field value is not empty then, `Records.responseElements.virtualMFADevice.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.serialNumber` log field value is not empty then, `Records.requestParameters.serialNumber` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GenerateServiceLastAccessedDetails` `ListPoliciesGrantingServiceAccess` and if the `Records.requestParameters.arn` log field value is not empty then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetOpenIDConnectProvider` and if the `Records.requestParameters.openIDConnectProviderArn` log field value is not empty then, `Records.requestParameters.openIDConnectProviderArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `SimulatePrincipalPolicy` and if the `Records.requestParameters.policySourceArn` log field value is not empty then, `Records.requestParameters.policySourceArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePublishingDestination` and if the `Records.requestParameters.destinationProperties.destinationArn` log field value is not empty then, `Records.requestParameters.destinationProperties.destinationArn` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.detectorId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.destinationId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.detectorId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.adminAccountId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.destinationId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.keyId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.serviceEventDetails.keyId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.keyId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.destinationKeyId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.targetKeyId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.keyMetadata.keyId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.secretId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.additionalEventData.SecretId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.xssMatchSetId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.webACLId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.ruleGroupId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.iPSetId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.byteMatchSetId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.ruleId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.summary.id`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.id`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.credentials.accessKeyId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.accessKey.accessKeyId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.instanceProfile.instanceProfileId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.policy.policyId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.role.roleId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.accessKeyId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.RuleGroupId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.Id`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `GetDetector` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SETTING` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetFindings` `ListFindings` `ListIPSets` `ListFilters` `CreateDetector` `GetMemberDetectors` `GetFindingsStatistics` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.detectorId` log field value is not empty then, `Records.responseElements.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `ListMembers` `DescribeOrganizationConfiguration` `CreateMembers` `UpdateOrganizationConfiguration` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreatePublishingDestination` `DescribePublishingDestination` `ListDetectors` and if the `Records.responseElements.destinationId` log field value is not empty then, `Records.responseElements.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.destinationId` log field value is not empty then, `Records.requestParameters.destinationId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSampleFindings` and if the `Records.requestParameters.detectorId` log field value is not empty then, `Records.requestParameters.detectorId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `TABLE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `EnableOrganizationAdminAccount` and if the `Records.requestParameters.adminAccountId` log field value is not empty then, `Records.requestParameters.adminAccountId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetKeyPolicy` `DescribeKey` `Decrypt` `ListResourceTags` `Encrypt` `GenerateDataKey` `ListAliases` `CreateGrant` `GenerateDataKeyWithoutPlaintext` `GetKeyRotationStatus` `ListGrants` `Sign` and if the `Records.requestParameters.keyId` log field value is not empty then, `Records.requestParameters.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `RetireGrant` `DisableKey` `PutKeyPolicy` `ScheduleKeyDeletion` and if the `Records.responseElements.keyId` log field value is not empty then, `Records.responseElements.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotateKey` and if the `Records.serviceEventDetails.keyId` log field value is not empty then, `Records.serviceEventDetails.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ReEncrypt` and if the `Records.requestParameters.destinationKeyId` log field value is not empty then, `Records.requestParameters.destinationKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateAlias` and if the `Records.requestParameters.targetKeyId` log field value is not empty then, `Records.requestParameters.targetKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKey` and if the `Records.responseElements.keyMetadata.keyId` log field value is not empty then, `Records.responseElements.keyMetadata.keyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateRuleGroup` and if the `Records.responseElements.RuleGroupId` log field value is not empty then, `Records.responseElements.RuleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeSecret` `GetResourcePolicy` `UpdateSecret` `PutSecretValue` `ListSecretVersionIds` `GetSecretValue` `UpdateSecretVersionStage` `GetRandomPassword` and if the `Records.requestParameters.secretId` log field value is not empty then, `Records.requestParameters.secretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `RotationStarted` and if the `Records.additionalEventData.SecretId` log field value is not empty then, `Records.additionalEventData.SecretId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetXssMatchSet` and if the `Records.requestParameters.xssMatchSetId` log field value is not empty then, `Records.requestParameters.xssMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetByteMatchSet` and if the `Records.requestParameters.byteMatchSetId` log field value is not empty then, `Records.requestParameters.byteMatchSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetWebACL` `DeleteWebACL` and if the `Records.requestParameters.webACLId` log field value is not empty then, `Records.requestParameters.webACLId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateWebACL` and if the `Records.requestParameters.id` log field value is not empty then, `Records.requestParameters.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRuleGroup` and if the `Records.requestParameters.ruleGroupId` log field value is not empty then, `Records.requestParameters.ruleGroupId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetRule` and if the `Records.requestParameters.ruleId` log field value is not empty then, `Records.requestParameters.ruleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `GetIPSet` and if the `Records.requestParameters.iPSetId` log field value is not empty then, `Records.requestParameters.iPSetId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateIPSet` and if the `Records.responseElements.summary.id` log field value is not empty then, `Records.responseElements.summary.id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `UpdateIPSet` and if the `Records.responseElements.Id` log field value is not empty then, `Records.responseElements.Id` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `IP_ADDRESS` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssumeRole` `AssumeRoleWithSAML` `AssumeRoleWithWebIdentity` `GetFederationToken` `GetSessionToken` and if the `Records.responseElements.credentials.accessKeyId` log field value is not empty then, `Records.responseElements.credentials.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateAccessKey` `DeleteAccessKey` `GetAccessKeyLastUsed` `UpdateAccessKey` and if the `Records.responseElements.accessKey.accessKeyId` log field value is not empty then, `Records.responseElements.accessKey.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.accessKeyId` log field value is not empty then, `Records.requestParameters.accessKeyId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInstanceProfile` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreatePolicy` and if the `Records.responseElements.instanceProfile.instanceProfileId` log field value is not empty then, `Records.responseElements.instanceProfile.instanceProfileId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRole` `CreateServiceLinkedRole` and if the `Records.responseElements.role.roleId` log field value is not empty then, `Records.responseElements.role.roleId` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `security_result.about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.resourceType`	`target.resource.resource_type`	If the `Records.requestParameters.resourceType` log field value is equal to `APPLICATION_LOAD_BALANCER` then, the `target.resource.resource_type` UDM field is set to `LOAD_BALANCER`. Else, if the `Records.requestParameters.resourceType` log field value is equal to `API_GATEWAY` then, the `target.resource.resource_type` UDM field is set to `GATEWAY`. Else, if the `Records.requestParameters.resourceType` log field value contain one of the following values `APPSYNC` `COGNITO_USER_POOL` `APP_RUNNER_SERVICE` then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.requestParameters.resourceType` log field value is equal to `VERIFIED_ACCESS_INSTANCE` then, the `target.resource.resource_type` UDM field is set to `ACCESS_POLICY`.
`Records.requestParameters.rules.statement.managedRuleGroupStatement.managedRuleGroupConfigs.aWSManagedRulesBotControlRuleSet.inspectionLevel`	`security_result.detection_fields[req_rules_statement_managed_rule_group_statement_managed_rule_group_configs_a_wsmanaged_rules_bot_control_rule_set_inspection_level]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.managedRuleGroupStatement.managedRuleGroupConfigs`, then the `security_result.rule_labels.key` UDM field is set to `req_rules_statement_managed_rule_group_statement_managed_rule_group_configs_a_wsmanaged_rules_bot_control_rule_set_inspection_level` and `Records.requestParameters.rules.statement.managedRuleGroupStatement.managedRuleGroupConfigs.aWSManagedRulesBotControlRuleSet.inspectionLevel` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.managedRuleGroupStatement.ruleActionOverrides.name`	`security_result.detection_fields[req_rules_statement_managed_rule_group_statement_rule_action_overrides_name]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.managedRuleGroupStatement.ruleActionOverrides`, then If the `Records.eventName` log field value contain one of the following values `CheckCapacity` `UpdateWebACL` then, the `security_result.detection_fields.key` UDM field is set to `req_rules_statement_managed_rule_group_statement_rule_action_overrides_name` and `Records.requestParameters.rules.statement.managedRuleGroupStatement.ruleActionOverrides.name` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.rules.visibilityConfig.metricName`	`security_result.detection_fields[req_rules_visibility_config_metric_name]`	Iterate through log field `Records.requestParameters.rules`, then the `security_result.detection_fields.key` UDM field is set to `req_rules_visibility_config_metric_name` and `Records.requestParameters.rules.visibilityConfig.metricName` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.rules.visibilityConfig.cloudWatchMetricsEnabled`	`security_result.detection_fields[req_rules_visibility_config_sampled_requests_enabled]`	Iterate through log field `Records.requestParameters.rules`, then the `security_result.detection_fields.key` UDM field is set to `req_rules_visibility_config_sampled_requests_enabled` and `Records.requestParameters.rules.visibilityConfig.cloudWatchMetricsEnabled` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.rules.visibilityConfig.sampledRequestsEnabled`	`security_result.detection_fields[req_rules_visibility_config_sampled_requests_enabled]`	Iterate through log field `Records.requestParameters.rules`, then the `security_result.detection_fields.key` UDM field is set to `req_rules_visibility_config_sampled_requests_enabled` and `Records.requestParameters.rules.visibilityConfig.sampledRequestsEnabled` log field is mapped to the `security_result.detection_fields.value` UDM field.
`Records.requestParameters.rules.priority`	`security_result.priority_details`	Iterate through log field `Records.requestParameters.rules`, then If the `Records.eventName` log field value contain one of the following values `CheckCapacity` `UpdateWebACL` then, `Records.requestParameters.rules.priority` log field is mapped to the `security_result.priority_details` UDM field.
`Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.fieldToMatch.singleHeader.name`	`security_result.rule_labels[req_rul_statement_and_statement_statements_byte_match_statement_field_to_match_single_header_name]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.andStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_statement_and_statement_statements_byte_match_statement_field_to_match_single_header_name` and `Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.fieldToMatch.singleHeader.name` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.positionalConstraint`	`security_result.rule_labels[req_rul_stat_and_statement_stat_byt_mat_stat_positional_constraint]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.andStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_and_statement_stat_byt_mat_stat_positional_constraint` and `Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.positionalConstraint` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.searchString.address`	`security_result.rule_labels[req_rul_stat_and_statement_stat_byt_mat_stat_sea_st_address]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.andStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_and_statement_stat_byt_mat_stat_sea_st_address` and `Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.searchString.address` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.searchString.bigEndian`	`security_result.rule_labels[req_rul_stat_and_statement_stat_byt_mat_stat_sea_st_big_endian]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.andStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_and_statement_stat_byt_mat_stat_sea_st_big_endian` and `Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.searchString.bigEndian` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.searchString.capacity`	`security_result.rule_labels[req_rul_stat_and_statement_stat_byt_mat_stat_sea_st_capacity]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.andStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_and_statement_stat_byt_mat_stat_sea_st_capacity` and `Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.searchString.capacity` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.searchString.hb`	`security_result.rule_labels[req_rul_stat_and_statement_stat_byt_mat_stat_sea_st_hb]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.andStatement.statements`, then Iterate through log field `Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.searchString.hb`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_and_statement_stat_byt_mat_stat_sea_st_hb` and `Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.searchString.hb` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.searchString.isReadOnly`	`security_result.rule_labels[req_rul_stat_and_statement_stat_byt_mat_stat_sea_st_is_read_only]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.andStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_and_statement_stat_byt_mat_stat_sea_st_is_read_only` and `Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.searchString.isReadOnly` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.searchString.limit`	`security_result.rule_labels[req_rul_stat_and_statement_stat_byt_mat_stat_sea_st_limit]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.andStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_and_statement_stat_byt_mat_stat_sea_st_limit` and `Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.searchString.limit` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.searchString.mark`	`security_result.rule_labels[req_rul_stat_and_statement_stat_byt_mat_stat_sea_st_mark]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.andStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_and_statement_stat_byt_mat_stat_sea_st_mark` and `Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.searchString.mark` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.searchString.nativeByteOrder`	`security_result.rule_labels[req_rul_stat_and_statement_stat_byt_mat_stat_sea_st_native_byte_order]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.andStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_and_statement_stat_byt_mat_stat_sea_st_native_byte_order` and `Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.searchString.nativeByteOrder` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.searchString.offset`	`security_result.rule_labels[req_rul_stat_and_statement_stat_byt_mat_stat_sea_st_offset]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.andStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_and_statement_stat_byt_mat_stat_sea_st_offset` and `Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.searchString.offset` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.searchString.position`	`security_result.rule_labels[req_rul_stat_and_statement_stat_byt_mat_stat_sea_st_position]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.andStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_and_statement_stat_byt_mat_stat_sea_st_position` and `Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.searchString.position` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.textTransformations.priority`	`security_result.rule_labels[req_rul_stat_and_statement_stat_byt_mat_stat_text_transformations_priority]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.andStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_and_statement_stat_byt_mat_stat_text_transformations_priority` and `Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.textTransformations.priority` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.textTransformations.type`	`security_result.rule_labels[req_rul_stat_and_statement_stat_byt_mat_stat_text_transformations_type]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.andStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_and_statement_stat_byt_mat_stat_text_transformations_type` and `Records.requestParameters.rules.statement.andStatement.statements.byteMatchStatement.textTransformations.type` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.andStatement.statements.geoMatchStatement.countryCodes`	`security_result.rule_labels[req_rul_stat_and_statement_statements_geo_match_statement_country_codes]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.andStatement.statements`, then Iterate through log field `Records.requestParameters.rules.statement.andStatement.statements.geoMatchStatement.countryCodes`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_and_statement_statements_geo_match_statement_country_codes` and `Records.requestParameters.rules.statement.andStatement.statements.geoMatchStatement.countryCodes` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.andStatement.statements.notStatement.statement.labelMatchStatement.key`	`security_result.rule_labels[req_rul_stat_and_statement_statement_label_match_statement_key]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.andStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_and_statement_statement_label_match_statement_key` and `Records.requestParameters.rules.statement.andStatement.statements.notStatement.statement.labelMatchStatement.key` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.andStatement.statements.notStatement.statement.labelMatchStatement.scope`	`security_result.rule_labels[req_rul_stat_and_statement_statement_label_match_statement_scope]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.andStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_and_statement_statement_label_match_statement_scope` and `Records.requestParameters.rules.statement.andStatement.statements.notStatement.statement.labelMatchStatement.scope` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.managedRuleGroupStatement.managedRuleGroupConfigs.aWSManagedRulesBotControlRuleSet.enableMachineLearning`	`security_result.rule_labels[req_rul_stat_managed_rule_group_configs_a_wsmanaged_rules_bot_control_rule_set_enable_machine_learning]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.managedRuleGroupStatement.managedRuleGroupConfigs`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_managed_rule_group_configs_a_wsmanaged_rules_bot_control_rule_set_enable_machine_learning` and `Records.requestParameters.rules.statement.managedRuleGroupStatement.managedRuleGroupConfigs.aWSManagedRulesBotControlRuleSet.enableMachineLearning` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.managedRuleGroupStatement.scopeDownStatement.notStatement.statement.byteMatchStatement.searchString.address`	`security_result.rule_labels[req_rul_stat_managed_rule_group_statement_sds_not_statement_stat_byt_mat_stat_sea_st_address]`	Iterate through log field `Records.requestParameters.rules`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_managed_rule_group_statement_sds_not_statement_stat_byt_mat_stat_sea_st_address` and `Records.requestParameters.rules.statement.managedRuleGroupStatement.scopeDownStatement.notStatement.statement.byteMatchStatement.searchString.address` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.managedRuleGroupStatement.scopeDownStatement.notStatement.statement.byteMatchStatement.searchString.nativeByteOrder`	`security_result.rule_labels[req_rul_stat_managed_rule_group_statement_sds_not_statement_stat_byt_mat_stat_sea_st_native_byte_order]`	Iterate through log field `Records.requestParameters.rules`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_managed_rule_group_statement_sds_not_statement_stat_byt_mat_stat_sea_st_native_byte_order` and `Records.requestParameters.rules.statement.managedRuleGroupStatement.scopeDownStatement.notStatement.statement.byteMatchStatement.searchString.nativeByteOrder` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.managedRuleGroupStatement.vendorName`	`security_result.rule_labels[req_rul_stat_managed_rule_group_statement_vendor_name]`	Iterate through log field `Records.requestParameters.rules`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_managed_rule_group_statement_vendor_name` and `Records.requestParameters.rules.statement.managedRuleGroupStatement.vendorName` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.aggregateKeyType`	`security_result.rule_labels[req_rul_stat_rbs_aggregate_key_type]`	Iterate through log field `Records.requestParameters.rules`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_aggregate_key_type` and `Records.requestParameters.rules.statement.rateBasedStatement.aggregateKeyType` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.evaluationWindowSec`	`security_result.rule_labels[req_rul_stat_rbs_evaluation_window_sec]`	Iterate through log field `Records.requestParameters.rules`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_evaluation_window_sec` and `Records.requestParameters.rules.statement.rateBasedStatement.evaluationWindowSec` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.fieldToMatch.singleHeader.name`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_field_to_match_single_header_name]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_field_to_match_single_header_name` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.fieldToMatch.singleHeader.name` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.positionalConstraint`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_positional_constraint]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_positional_constraint` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.positionalConstraint` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.searchString.address`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_sea_st_address]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_sea_st_address` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.searchString.address` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.searchString.bigEndian`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_sea_st_big_endian]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_sea_st_big_endian` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.searchString.bigEndian` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.searchString.capacity`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_sea_st_capacity]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_sea_st_capacity` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.searchString.capacity` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.searchString.hb`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_sea_st_hb]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.searchString.hb`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_sea_st_hb` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.searchString.hb` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.searchString.isReadOnly`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_sea_st_is_read_only]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_sea_st_is_read_only` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.searchString.isReadOnly` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.searchString.limit`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_sea_st_limit]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_sea_st_limit` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.searchString.limit` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.searchString.mark`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_sea_st_mark]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_sea_st_mark` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.searchString.mark` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.searchString.nativeByteOrder`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_sea_st_native_byte_order]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_sea_st_native_byte_order` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.searchString.nativeByteOrder` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.searchString.offset`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_sea_st_offset]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_sea_st_offset` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.searchString.offset` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.searchString.position`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_sea_st_position]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_sea_st_position` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.searchString.position` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.textTransformations.priority`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_text_transformations_priority]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_text_transformations_priority` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.textTransformations.priority` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.textTransformations.type`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_stat_byt_mat_stat_text_transformations_type]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `key` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.byteMatchStatement.textTransformations.type` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.fieldToMatch.singleHeader.name`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_field_to_match_single_header_name]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_field_to_match_single_header_name` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.fieldToMatch.singleHeader.name` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.positionalConstraint`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_positional_constraint]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_positional_constraint` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.positionalConstraint` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.searchString.address`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_sea_st_address]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_sea_st_address` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.searchString.address` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.searchString.bigEndian`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_sea_st_big_endian]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_sea_st_big_endian` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.searchString.bigEndian` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.searchString.capacity`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_sea_st_capacity]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_sea_st_capacity` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.searchString.capacity` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.searchString.hb`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_sea_st_hb]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.searchString.hb`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_sea_st_hb` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.searchString.hb` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.searchString.isReadOnly`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_sea_st_is_read_only]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_sea_st_is_read_only` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.searchString.isReadOnly` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.searchString.limit`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_sea_st_limit]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_sea_st_limit` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.searchString.limit` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.searchString.mark`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_sea_st_mark]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_sea_st_mark` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.searchString.mark` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.searchString.nativeByteOrder`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_sea_st_native_byte_order]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_sea_st_native_byte_order` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.searchString.nativeByteOrder` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.searchString.offset`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_sea_st_offset]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_sea_st_offset` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.searchString.offset` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.searchString.position`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_sea_st_position]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_sea_st_position` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.searchString.position` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.textTransformations.priority`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_text_transformations_priority]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_text_transformations_priority` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.textTransformations.priority` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.textTransformations.type`	`security_result.rule_labels[req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_text_transformations_type]`	Iterate through log field `Records.requestParameters.rules`, then Iterate through log field `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rbs_sds_or_statement_notstat_byt_mat_stat_text_transformations_type` and `Records.requestParameters.rules.statement.rateBasedStatement.scopeDownStatement.orStatement.statements.notStatement.statement.byteMatchStatement.textTransformations.type` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.statement.ruleGroupReferenceStatement.aRN`	`security_result.rule_labels[req_rul_stat_rule_group_reference_statement_arn]`	Iterate through log field `Records.requestParameters.rules`, then the `security_result.rule_labels.key` UDM field is set to `req_rul_stat_rule_group_reference_statement_arn` and `Records.requestParameters.rules.statement.ruleGroupReferenceStatement.aRN` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.rules.name`	`security_result.rule_name`	Iterate through log field `Records.requestParameters.rules`, then If the `Records.eventName` log field value contain one of the following values `CheckCapacity` `UpdateWebACL` then, `Records.requestParameters.rules.name` log field is mapped to the `security_result.rule_name` UDM field.
`Records.requestParameters.rules.statement.managedRuleGroupStatement.name`	`security_result.rule_set_display_name`	Iterate through log field `Records.requestParameters.rules`, then If the `Records.eventName` log field value contain one of the following values `CheckCapacity` `UpdateWebACL` then, `Records.requestParameters.rules.statement.managedRuleGroupStatement.name` log field is mapped to the `security_result.rule_set_display_name` UDM field.
`Records.responseElements.user.createDate`	`target.user.attribute.creation_time`
`Records.requestParameters.passwordResetRequired`	`target.user.attribute.labels[req_password_reset_required]`
`Records.requestParameters.tags.value`	`target.user.attribute.labels[req_tags_value]`	If the `Records.eventName` log field value is equal to `TagUser` then, Iterate through log field `Records.requestParameters.tags`, then `Records.requestParameters.tags.key` log field is mapped to the `target.user.attribute.labels.key` UDM field and `Records.requestParameters.tags.value` log field is mapped to the `target.user.attribute.labels.value` UDM field.
`Records.requestParameters.tags.key`	`target.user.attribute.labels[req_tags_value]`	If the `Records.eventName` log field value is equal to `TagUser` then, Iterate through log field `Records.requestParameters.tags`, then `Records.requestParameters.tags.key` log field is mapped to the `target.user.attribute.labels.key` UDM field and `Records.requestParameters.tags.value` log field is mapped to the `target.user.attribute.labels.value` UDM field.
`Records.responseElements.deletionTaskId`	`target.user.attribute.labels[res_deletion_task_id]`
`Records.responseElements.loginProfile.createDate`	`target.user.attribute.labels[res_login_profile_create_date]`
`Records.responseElements.loginProfile.passwordResetRequired`	`target.user.attribute.labels[res_login_profile_password_reset_required]`
`Records.responseElements.user.path`	`target.user.attribute.labels[res_user_path]`
`Records.responseElements.user.tags.key`	`target.user.attribute.labels[res_user_tags_key]`	Iterate through log field `Records.responseElements.user.tags`, then `Records.responseElements.user.tags.key` log field is mapped to the `target.user.attribute.labels.key` UDM field and `Records.responseElements.user.tags.value` log field is mapped to the `target.user.attribute.labels.value` UDM field.
`Records.responseElements.user.tags.value`	`target.user.attribute.labels[res_user_tags_key]`	Iterate through log field `Records.responseElements.user.tags`, then `Records.responseElements.user.tags.key` log field is mapped to the `target.user.attribute.labels.key` UDM field and `Records.responseElements.user.tags.value` log field is mapped to the `target.user.attribute.labels.value` UDM field.
`Records.requestParameters.roleName`	`target.user.attribute.roles.name`
`Records.responseElements.user.userId`	`target.user.product_object_id`
`Records.requestParameters.userName`	`target.user.user_display_name`	If the `Records.eventName` log field value contain one of the following values `AddUserToGroup` `AttachGroupPolicy` then, `Records.requestParameters.userName` log field is mapped to the `target.user.user_display_name` UDM field and `Records.requestParameters.groupName` log field is mapped to the `target.user.group_identifiers` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateAccessKey` and the `Records.responseElements.accessKey.userName` log field value is not empty then, `Records.responseElements.accessKey.userName` log field is mapped to the `target.user.user_display_name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLoginProfile` and the `Records.responseElements.loginProfile.userName` log field value is not empty then, `Records.responseElements.loginProfile.userName` log field is mapped to the `target.user.user_display_name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateUser` and the `Records.responseElements.user.userName` log field value is not empty then, `Records.responseElements.user.userName` log field is mapped to the `target.user.user_display_name` UDM field. Else, `Records.requestParameters.userName` log field is mapped to the `target.user.user_display_name` UDM field.
`Records.responseElements.accessKey.userName`	`target.user.user_display_name`	If the `Records.eventName` log field value contain one of the following values `AddUserToGroup` `AttachGroupPolicy` then, `Records.requestParameters.userName` log field is mapped to the `target.user.user_display_name` UDM field and `Records.requestParameters.groupName` log field is mapped to the `target.user.group_identifiers` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateAccessKey` and the `Records.responseElements.accessKey.userName` log field value is not empty then, `Records.responseElements.accessKey.userName` log field is mapped to the `target.user.user_display_name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLoginProfile` and the `Records.responseElements.loginProfile.userName` log field value is not empty then, `Records.responseElements.loginProfile.userName` log field is mapped to the `target.user.user_display_name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateUser` and the `Records.responseElements.user.userName` log field value is not empty then, `Records.responseElements.user.userName` log field is mapped to the `target.user.user_display_name` UDM field. Else, `Records.requestParameters.userName` log field is mapped to the `target.user.user_display_name` UDM field.
`Records.responseElements.loginProfile.userName`	`target.user.user_display_name`	If the `Records.eventName` log field value contain one of the following values `AddUserToGroup` `AttachGroupPolicy` then, `Records.requestParameters.userName` log field is mapped to the `target.user.user_display_name` UDM field and `Records.requestParameters.groupName` log field is mapped to the `target.user.group_identifiers` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateAccessKey` and the `Records.responseElements.accessKey.userName` log field value is not empty then, `Records.responseElements.accessKey.userName` log field is mapped to the `target.user.user_display_name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLoginProfile` and the `Records.responseElements.loginProfile.userName` log field value is not empty then, `Records.responseElements.loginProfile.userName` log field is mapped to the `target.user.user_display_name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateUser` and the `Records.responseElements.user.userName` log field value is not empty then, `Records.responseElements.user.userName` log field is mapped to the `target.user.user_display_name` UDM field. Else, `Records.requestParameters.userName` log field is mapped to the `target.user.user_display_name` UDM field.
`Records.responseElements.user.userName`	`target.user.user_display_name`	If the `Records.eventName` log field value contain one of the following values `AddUserToGroup` `AttachGroupPolicy` then, `Records.requestParameters.userName` log field is mapped to the `target.user.user_display_name` UDM field and `Records.requestParameters.groupName` log field is mapped to the `target.user.group_identifiers` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateAccessKey` and the `Records.responseElements.accessKey.userName` log field value is not empty then, `Records.responseElements.accessKey.userName` log field is mapped to the `target.user.user_display_name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLoginProfile` and the `Records.responseElements.loginProfile.userName` log field value is not empty then, `Records.responseElements.loginProfile.userName` log field is mapped to the `target.user.user_display_name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateUser` and the `Records.responseElements.user.userName` log field value is not empty then, `Records.responseElements.user.userName` log field is mapped to the `target.user.user_display_name` UDM field. Else, `Records.requestParameters.userName` log field is mapped to the `target.user.user_display_name` UDM field.
`Records.requestParameters.groupName`	`target.user.user_display_name`	If the `Records.eventName` log field value contain one of the following values `AddUserToGroup` `AttachGroupPolicy` then, `Records.requestParameters.userName` log field is mapped to the `target.user.user_display_name` UDM field and `Records.requestParameters.groupName` log field is mapped to the `target.user.group_identifiers` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateAccessKey` and the `Records.responseElements.accessKey.userName` log field value is not empty then, `Records.responseElements.accessKey.userName` log field is mapped to the `target.user.user_display_name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLoginProfile` and the `Records.responseElements.loginProfile.userName` log field value is not empty then, `Records.responseElements.loginProfile.userName` log field is mapped to the `target.user.user_display_name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateUser` and the `Records.responseElements.user.userName` log field value is not empty then, `Records.responseElements.user.userName` log field is mapped to the `target.user.user_display_name` UDM field. Else, `Records.requestParameters.userName` log field is mapped to the `target.user.user_display_name` UDM field.
`Records.responseElements.user.arn`	`target.user.userid`

Field mapping reference: AWS CloudTrail - Cloudtrail

The following table lists the log fields for the Cloudtrail log type and their corresponding UDM fields.

Log field	UDM mapping	Logic
`Records.requestParameters.enableLogFileValidation`	`target.resource.attribute.labels[records_request_parameters_enable_log_file_validation]`
`Records.requestParameters.includeGlobalServiceEvents`	`target.resource.attribute.labels[records_request_parameters_include_global_service_events]`
`Records.responseElements.includeGlobalServiceEvents`	`target.resource.attribute.labels[records_response_elements_include_global_service_events]`
`Records.requestParameters.isMultiRegionTrail`	`target.resource.attribute.labels[records_request_parameters_is_multi_region_trail]`
`Records.responseElements.isMultiRegionTrail`	`target.resource.attribute.labels[records_response_elements_is_multi_region_trail]`
`Records.responseElements.isOrganizationTrail`	`target.resource.attribute.labels[records_response_elements_is_organization_trail]`
`Records.requestParameters.isOrganizationTrail`	`target.resource.attribute.labels[records_request_parameters_is_organization_trail]`
`Records.responseElements.logFileValidationEnabled`	`target.resource.attribute.labels[records_response_elements_log_file_validation_enabled]`
`Records.responseElements.trailARN`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateTrail` `PutEventSelectors` `UpdateTrail` and the `Records.responseElements.trailARN` log field value is not empty then, `Records.responseElements.trailARN` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeTrails` then, Iterate through log field `Records.requestParameters.trailNameList`, then If the `index` value is equal to `0` then, `Records.requestParameters.trailNameList` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.trailNameList` log field is mapped to the `target.resource_ancestors.name` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `GetEventSelectors` `GetInsightSelectors` and the `Records.requestParameters.trailName` log field value is not empty then, `Records.requestParameters.trailName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `GetTrail` and the `Records.responseElements.name` log field value is not empty then, `Records.responseElements.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `StartLogging` `StopLogging` `DeleteTrail` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `ListTags` then, Iterate through log field `Records.requestParameters.resourceIdList`, then If the `index` value is equal to `0` then, `Records.requestParameters.resourceIdList` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.resourceIdList` log field is mapped to the `target.resource_ancestors.name` UDM field.
`Records.requestParameters.trailNameList`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateTrail` `PutEventSelectors` `UpdateTrail` and the `Records.responseElements.trailARN` log field value is not empty then, `Records.responseElements.trailARN` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeTrails` then, Iterate through log field `Records.requestParameters.trailNameList`, then If the `index` value is equal to `0` then, `Records.requestParameters.trailNameList` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.trailNameList` log field is mapped to the `target.resource_ancestors.name` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `GetEventSelectors` `GetInsightSelectors` and the `Records.requestParameters.trailName` log field value is not empty then, `Records.requestParameters.trailName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `GetTrail` and the `Records.responseElements.name` log field value is not empty then, `Records.responseElements.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `StartLogging` `StopLogging` `DeleteTrail` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `ListTags` then, Iterate through log field `Records.requestParameters.resourceIdList`, then If the `index` value is equal to `0` then, `Records.requestParameters.resourceIdList` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.resourceIdList` log field is mapped to the `target.resource_ancestors.name` UDM field.
`Records.requestParameters.trailName`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateTrail` `PutEventSelectors` `UpdateTrail` and the `Records.responseElements.trailARN` log field value is not empty then, `Records.responseElements.trailARN` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeTrails` then, Iterate through log field `Records.requestParameters.trailNameList`, then If the `index` value is equal to `0` then, `Records.requestParameters.trailNameList` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.trailNameList` log field is mapped to the `target.resource_ancestors.name` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `GetEventSelectors` `GetInsightSelectors` and the `Records.requestParameters.trailName` log field value is not empty then, `Records.requestParameters.trailName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `GetTrail` and the `Records.responseElements.name` log field value is not empty then, `Records.responseElements.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `StartLogging` `StopLogging` `DeleteTrail` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `ListTags` then, Iterate through log field `Records.requestParameters.resourceIdList`, then If the `index` value is equal to `0` then, `Records.requestParameters.resourceIdList` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.resourceIdList` log field is mapped to the `target.resource_ancestors.name` UDM field.
`Records.requestParameters.name`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateTrail` `PutEventSelectors` `UpdateTrail` and the `Records.responseElements.trailARN` log field value is not empty then, `Records.responseElements.trailARN` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeTrails` then, Iterate through log field `Records.requestParameters.trailNameList`, then If the `index` value is equal to `0` then, `Records.requestParameters.trailNameList` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.trailNameList` log field is mapped to the `target.resource_ancestors.name` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `GetEventSelectors` `GetInsightSelectors` and the `Records.requestParameters.trailName` log field value is not empty then, `Records.requestParameters.trailName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `GetTrail` and the `Records.responseElements.name` log field value is not empty then, `Records.responseElements.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `StartLogging` `StopLogging` `DeleteTrail` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `ListTags` then, Iterate through log field `Records.requestParameters.resourceIdList`, then If the `index` value is equal to `0` then, `Records.requestParameters.resourceIdList` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.resourceIdList` log field is mapped to the `target.resource_ancestors.name` UDM field.
`Records.requestParameters.resourceIdList`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateTrail` `PutEventSelectors` `UpdateTrail` and the `Records.responseElements.trailARN` log field value is not empty then, `Records.responseElements.trailARN` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeTrails` then, Iterate through log field `Records.requestParameters.trailNameList`, then If the `index` value is equal to `0` then, `Records.requestParameters.trailNameList` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.trailNameList` log field is mapped to the `target.resource_ancestors.name` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `GetEventSelectors` `GetInsightSelectors` and the `Records.requestParameters.trailName` log field value is not empty then, `Records.requestParameters.trailName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `GetTrail` and the `Records.responseElements.name` log field value is not empty then, `Records.responseElements.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `StartLogging` `StopLogging` `DeleteTrail` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `ListTags` then, Iterate through log field `Records.requestParameters.resourceIdList`, then If the `index` value is equal to `0` then, `Records.requestParameters.resourceIdList` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.resourceIdList` log field is mapped to the `target.resource_ancestors.name` UDM field.
`Records.responseElements.name`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateTrail` `PutEventSelectors` `UpdateTrail` and the `Records.responseElements.trailARN` log field value is not empty then, `Records.responseElements.trailARN` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeTrails` then, Iterate through log field `Records.requestParameters.trailNameList`, then If the `index` value is equal to `0` then, `Records.requestParameters.trailNameList` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.trailNameList` log field is mapped to the `target.resource_ancestors.name` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `GetEventSelectors` `GetInsightSelectors` and the `Records.requestParameters.trailName` log field value is not empty then, `Records.requestParameters.trailName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `GetTrail` and the `Records.responseElements.name` log field value is not empty then, `Records.responseElements.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `StartLogging` `StopLogging` `DeleteTrail` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `ListTags` then, Iterate through log field `Records.requestParameters.resourceIdList`, then If the `index` value is equal to `0` then, `Records.requestParameters.resourceIdList` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.resourceIdList` log field is mapped to the `target.resource_ancestors.name` UDM field.
`Records.responseElements.name`	`target.resource.attribute.labels[records_response_elements_name]`
`Records.responseElements.s3BucketName`	`target.resource_ancestors.name`
	`target.resource_ancestors.resource_type`	If the `Records.eventName` log field value contain one of the following values `CreateTrail` `UpdateTrail` and (the `Records.responseElements.s3BucketName` log field value is not empty or the `Records.requestParameters.s3BucketName` log field value is not empty ) then, the `target.resource_ancestors.resource_type` UDM field is set to `STORAGE_BUCKET`.
	`target.resource_ancestors.attribute.cloud.environment`	If the `Records.eventName` log field value contain one of the following values `CreateTrail` `UpdateTrail` and (the `Records.responseElements.s3BucketName` log field value is not empty or the `Records.requestParameters.s3BucketName` log field value is not empty ) then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
	`target.resource.resource_type`	If the `Records.eventName` log field value contain one of the following values `CreateTrail` `PutEventSelectors` `UpdateTrail` and the `Records.responseElements.trailARN` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `DescribeTrails` then, Iterate through log field `Records.requestParameters.trailNameList`, then If the `index` value is equal to `0` then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value contain one of the following values `GetEventSelectors` `GetInsightSelectors` and the `Records.requestParameters.trailName` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value matches the regular expression pattern `GetTrail` and the `Records.responseElements.name` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value contain one of the following values `StartLogging` `StopLogging` `DeleteTrail` and the `Records.requestParameters.name` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `ListTags` then, Iterate through log field `Records.requestParameters.resourceIdList`, then If the `index` value is equal to `0` then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE`.
	`target.resource.attribute.cloud.environment`	If the `Records.eventName` log field value contain one of the following values `CreateTrail` `PutEventSelectors` `UpdateTrail` and the `Records.responseElements.trailARN` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeTrails` then, Iterate through log field `Records.requestParameters.trailNameList`, then If the `index` value is equal to `0` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `GetEventSelectors` `GetInsightSelectors` and the `Records.requestParameters.trailName` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value matches the regular expression pattern `GetTrail` and the `Records.responseElements.name` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `StartLogging` `StopLogging` `DeleteTrail` and the `Records.requestParameters.name` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ListTags` then, Iterate through log field `Records.requestParameters.resourceIdList`, then If the `index` value is equal to `0` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.includeShadowTrails`	`target.resource.attribute.labels[records_request_parameters_include_shadow_trails]`
`Records.requestParameters.s3KeyPrefix`	`target.resource_ancestors.attribute.labels[records_request_parameters_s3key_prefix]`
`Records.requestParameters.kmsKeyId`	`target.resource.attribute.labels[records_request_parameters_kms_key_id]`
`Records.responseElements.kmsKeyId`	`target.resource.attribute.labels[records_response_elements_kms_key_id]`
`Records.responseElements.snsTopicARN`	`target.resource.attribute.labels[records_response_elements_sns_topic_arn]`
`Records.responseElements.snsTopicName`	`target.resource.attribute.labels[records_response_elements_sns_topic_name]`
`Records.requestParameters.snsTopicName`	`target.resource.attribute.labels[records_request_parameters_sns_topic_name]`
`Records.requestParameters.cloudWatchLogsRoleArn`	`target.resource.attribute.roles.name`
`Records.requestParameters.cloudWatchLogsLogGroupArn`	`target.resource.attribute.labels[records_request_parameters_cloud_watch_logs_log_group_arn]`
`Records.requestParameters.maxResults`	`target.resource.attribute.labels[records_request_parameters_max_results]`
`Records.requestParameters.nextToken`	`target.resource.attribute.labels[records_request_parameters_next_token]`
`Records.requestParameters.endTime`	`target.resource.attribute.labels[records_request_parameters_end_time]`
`Records.requestParameters.startTime`	`target.resource.attribute.labels[records_request_parameters_start_time]`
`Records.requestParameters.lookupAttributes.attributeKey`	`target.resource.attribute.labels[records_request_parameters_lookup_attributes_attribute_key]`	Iterate through log field `Records.requestParameters.lookupAttributes`, then `Records.requestParameters.lookupAttributes.attributeKey` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.lookupAttributes.attributeValue` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.lookupAttributes.attributeValue`	`target.resource.attribute.labels[records_request_parameters_lookup_attributes_attribute_key]`	Iterate through log field `Records.requestParameters.lookupAttributes`, then `Records.requestParameters.lookupAttributes.attributeKey` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.lookupAttributes.attributeValue` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.eventCategory`	`target.resource.attribute.labels[records_request_parameters_event_category]`
`Records.requestParameters.advancedEventSelectors.name`	`target.resource.attribute.labels[records_request_parameters_advanced_event_selectors_name]`	Iterate through log field `Records.requestParameters.advancedEventSelectors`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_advanced_event_selectors_name` and `Records.requestParameters.advancedEventSelectors.name` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.advancedEventSelectors.name`	`target.resource.attribute.labels[records_response_elements_advanced_event_selectors_name]`	Iterate through log field `Records.responseElements.advancedEventSelectors`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_advanced_event_selectors_name` and `Records.responseElements.advancedEventSelectors.name` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.advancedEventSelectors.fieldSelectors.equals`	`target.resource.attribute.labels[records_response_elements_advanced_event_selectors_field_selectors_equals]`	Iterate through log field `Records.responseElements.advancedEventSelectors`, then Iterate through log field `Records.responseElements.advancedEventSelectors.fieldSelectors`, then Iterate through log field `Records.responseElements.advancedEventSelectors.fieldSelectors.equals`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_advanced_event_selectors_field_selectors_equals` and `Records.responseElements.advancedEventSelectors.fieldSelectors.equals` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.advancedEventSelectors.fieldSelectors.equals`	`target.resource.attribute.labels[records_request_parameters_advanced_event_selectors_field_selectors_equals]`	Iterate through log field `Records.requestParameters.advancedEventSelectors`, then Iterate through log field `Records.requestParameters.advancedEventSelectors.fieldSelectors`, then Iterate through log field `Records.requestParameters.advancedEventSelectors.fieldSelectors.equals`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_advanced_event_selectors_field_selectors_equals` and `Records.requestParameters.advancedEventSelectors.fieldSelectors.equals` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.advancedEventSelectors.fieldSelectors.field`	`target.resource.attribute.labels[records_response_elements_advanced_event_selectors_field_selectors_field]`	Iterate through log field `Records.responseElements.advancedEventSelectors`, then Iterate through log field `Records.responseElements.advancedEventSelectors.fieldSelectors`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_advanced_event_selectors_field_selectors_field` and `Records.responseElements.advancedEventSelectors.fieldSelectors.field` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.advancedEventSelectors.fieldSelectors.field`	`target.resource.attribute.labels[records_request_parameters_advanced_event_selectors_field_selectors_field]`	Iterate through log field `Records.requestParameters.advancedEventSelectors`, then Iterate through log field `Records.requestParameters.advancedEventSelectors.fieldSelectors`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_advanced_event_selectors_field_selectors_field` and `Records.requestParameters.advancedEventSelectors.fieldSelectors.field` log field is mapped to the `target.resource.attribute.labels.value` UDM field.

Field mapping reference: AWS CloudTrail - Cloudshell

The following table lists the log fields for the Cloudshell log type and their corresponding UDM fields.

Log field	UDM mapping	Logic
`Records.requestParameters.layout`	`additional.fields[req_layout]`
`Records.responseElements.message`	`security_result.description`
`Records.responseElements.code`	`security_result.summary`	If the `Records.responseElements.code` log field value is not empty then, the `security_result.action` UDM field is set to `BLOCK` and `Records.responseElements.code` log field is mapped to the `security_result.action_details` UDM field.
`Records.requestParameters.EnvironmentId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `CreateEnvironment` then, `Records.responseElements.EnvironmentId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `PutCredentials` then, `Records.requestParameters.EnvironmentId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `RedeemCode` then, `Records.requestParameters.EnvironmentId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSession` then, `Records.requestParameters.EnvironmentId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `SendHeartbeat` `GetEnvironmentStatus` `DeleteSession` `GetFileUploadUrls` `StartEnvironment` then, `Records.requestParameters.EnvironmentId` log field is mapped to the `target.resource.product_object_id` UDM field.
`Records.responseElements.EnvironmentId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `CreateEnvironment` then, `Records.responseElements.EnvironmentId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `PutCredentials` then, `Records.requestParameters.EnvironmentId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `RedeemCode` then, `Records.requestParameters.EnvironmentId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSession` then, `Records.requestParameters.EnvironmentId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `SendHeartbeat` `GetEnvironmentStatus` `DeleteSession` `GetFileUploadUrls` `StartEnvironment` then, `Records.requestParameters.EnvironmentId` log field is mapped to the `target.resource.product_object_id` UDM field.
	`target.resource.resource_type`	If the `Records.eventName` log field value contain one of the following values `PutCredentials` `CreateEnvironment` `RedeemCode` `CreateSession` `SendHeartbeat` `GetEnvironmentStatus` `DeleteSession` `GetFileUploadUrls` `StartEnvironment` and (the `Records.requestParameters.EnvironmentId` log field value is not empty or the `Records.responseElements.EnvironmentId` log field value is not empty ) then, the `target.resource.resource_type` UDM field is set to `RUNTIME`.
	`target.resource.attribute.cloud.environment`	If the `Records.eventName` log field value contain one of the following values `PutCredentials` `CreateEnvironment` `RedeemCode` `CreateSession` `SendHeartbeat` `GetEnvironmentStatus` `DeleteSession` `GetFileUploadUrls` `StartEnvironment` and (the `Records.requestParameters.EnvironmentId` log field value is not empty or the `Records.responseElements.EnvironmentId` log field value is not empty ) then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.StartScreenMessages.content`	`target.resource.attribute.labels[res_start_screen_messages_content]`	Iterate through log field `Records.responseElements.StartScreenMessages`, then the `target.resource.attribute.labels.key` UDM field is set to `res_start_screen_messages_content` and `Records.responseElements.StartScreenMessages.content` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.StartScreenMessages.id`	`target.resource.attribute.labels[res_start_screen_messages_id]`	Iterate through log field `Records.responseElements.StartScreenMessages`, then the `target.resource.attribute.labels.key` UDM field is set to `res_start_screen_messages_id` and `Records.responseElements.StartScreenMessages.id` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.StartScreenMessages.type`	`target.resource.attribute.labels[res_start_screen_messages_type]`	Iterate through log field `Records.responseElements.StartScreenMessages`, then the `target.resource.attribute.labels.key` UDM field is set to `res_start_screen_messages_type` and `Records.responseElements.StartScreenMessages.type` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.StartScreenMessages.link.url`	`target.resource.attribute.labels[res_start_screen_messages_link_url]`	Iterate through log field `Records.responseElements.StartScreenMessages`, then the `target.resource.attribute.labels.key` UDM field is set to `res_start_screen_messages_link_url` and `Records.responseElements.StartScreenMessages.link.url` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.StartScreenMessages.link.text`	`target.resource.attribute.labels[res_start_screen_messages_link_text]`	Iterate through log field `Records.responseElements.StartScreenMessages`, then the `target.resource.attribute.labels.key` UDM field is set to `res_start_screen_messages_link_text` and `Records.responseElements.StartScreenMessages.link.text` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.Status`	`target.resource.attribute.labels[res_status]`
`Records.requestParameters.RedirectUri`	`security_result.url_back_to_product`
`Records.requestParameters.CodeVerifier`	`target.resource.attribute.labels[req_code_verifier]`
`Records.requestParameters.KeyBase`	`target.resource.attribute.labels[req_key_base]`
`Records.requestParameters.AuthCode`	`target.resource.attribute.labels[req_auth_code]`
`Records.responseElements.SessionId`	`network.session_id`
`Records.responseElements.TokenValue`	`target.resource.attribute.labels[res_token_value]`
`Records.requestParameters.TabId`	`target.resource.attribute.labels[req_tab_id]`
`Records.responseElements.StreamUrl`	`target.resource.attribute.labels[res_stream_url]`
`Records.requestParameters.FileUploadPath`	`target.file.full_path`

Field mapping reference: AWS CloudTrail - Lambda

The following table lists the log fields for the Lambda log type and their corresponding UDM fields.

Log field	UDM mapping	Logic
`Records.additionalEventData.customerEniId`	`additional.fields[customer_eni_id]`
`Records.additionalEventData.functionVersion`	`additional.fields[function_version]`
`Records.additionalEventData.signatureStatus`	`additional.fields[signature_status]`
`Records.requestParameters.action`	`target.resource.attribute.labels[req_action]`
`Records.requestParameters.architectures`	`target.resource.attribute.labels[req_architectures]`	Iterate through log field `Records.requestParameters.architectures`, then the `target.resource.attribute.labels.key` UDM field is set to `req_architectures` and `Records.requestParameters.architectures` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.arn`	`target.resource.name`	If the `Records.eventName` log field value matches the regular expression pattern `GetLayerVersionByArn` then, `Records.requestParameters.arn` log field is mapped to the `target.resource.name` UDM field.
`Records.requestParameters.batchSize`	`target.resource.attribute.labels[req_batch_size]`
`Records.requestParameters.code.s3Bucket`	`target.resource.attribute.labels[req_code_s3_bucket]`
`Records.requestParameters.code.s3Key`	`target.resource.attribute.labels[req_code_s3_key]`
`Records.requestParameters.content.s3Bucket`	`target.resource.attribute.labels[req_content_s3_bucket]`
`Records.requestParameters.content.s3Key`	`target.resource.attribute.labels[req_content_s3_key]`
`Records.requestParameters.contentType`	`target.resource.attribute.labels[req_content_type]`
`Records.requestParameters.deadLetterConfig.targetArn`	`target.resource.attribute.labels[req_dead_letter_config_target_arn]`
`Records.requestParameters.dryRun`	`target.resource.attribute.labels[req_dry_run]`
`Records.requestParameters.enabled`	`target.resource.attribute.labels[req_enabled]`
`Records.requestParameters.fullyQualifiedArn.arnPrefix.account`	`target.resource.attribute.labels[req_fully_qualified_arn_arn_prefix_account]`
`Records.requestParameters.fullyQualifiedArn.arnPrefix.partition`	`target.resource.attribute.labels[req_fully_qualified_arn_arn_prefix_partition]`
`Records.requestParameters.fullyQualifiedArn.arnPrefix.region`	`target.resource.attribute.labels[req_fully_qualified_arn_arn_prefix_region]`
`Records.requestParameters.fullyQualifiedArn.relativeId.functionName`	`target.resource.attribute.labels[req_fully_qualified_arn_arn_prefix_function_name]`
`Records.requestParameters.functionName`	`target.resource.name`	If the `Records.eventName` log field value matches the regular expression pattern `AddPermission` or the `Records.eventName` log field value matches the regular expression pattern `DeleteFunction` or the `Records.eventName` log field value matches the regular expression pattern `DisableReplication` or the `Records.eventName` log field value matches the regular expression pattern `EnableReplication` or the `Records.eventName` log field value matches the regular expression pattern `GetFunction` or the `Records.eventName` log field value matches the regular expression pattern `GetFunctionCodeSigningConfig` or the `Records.eventName` log field value matches the regular expression pattern `GetFunctionConfiguration` or the `Records.eventName` log field value matches the regular expression pattern `GetFunctionEventInvokeConfig` or the `Records.eventName` log field value matches the regular expression pattern `GetFunctionUrlConfig` or the `Records.eventName` log field value matches the regular expression pattern `GetProvisionedConcurrencyConfig` or the `Records.eventName` log field value matches the regular expression pattern `GetRuntimeManagementConfig` or the `Records.eventName` log field value matches the regular expression pattern `Invoke` or the `Records.eventName` log field value matches the regular expression pattern `ListAliases` or the `Records.eventName` log field value matches the regular expression pattern `ListFunctionEventInvokeConfigs` or the `Records.eventName` log field value matches the regular expression pattern `ListFunctions` or the `Records.eventName` log field value matches the regular expression pattern `ListFunctionUrlConfigs` or the `Records.eventName` log field value matches the regular expression pattern `ListProvisionedConcurrencyConfigs` or the `Records.eventName` log field value matches the regular expression pattern `ListVersionsByFunction` or the `Records.eventName` log field value matches the regular expression pattern `RemovePermission` then, `Records.requestParameters.functionName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `CreateAlias` or the `Records.eventName` log field value matches the regular expression pattern `DeleteAlias` or the `Records.eventName` log field value matches the regular expression pattern `ListEventSourceMappings` or the `Records.eventName` log field value matches the regular expression pattern `UpdateAlias` then, `Records.requestParameters.functionName` log field is mapped to the `target.resource_ancestors.name` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `CreateFunction` or the `Records.eventName` log field value matches the regular expression pattern `PublishVersion` then, the `target.resource.attribute.labels.key` UDM field is set to `req_function_name` and `Records.requestParameters.functionName` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
	`target.resource.resource_type`	If the `Records.eventName` log field value matches the regular expression pattern `AddPermission` or the `Records.eventName` log field value matches the regular expression pattern `DeleteFunction` or the `Records.eventName` log field value matches the regular expression pattern `DisableReplication` or the `Records.eventName` log field value matches the regular expression pattern `EnableReplication` or the `Records.eventName` log field value matches the regular expression pattern `GetFunction` or the `Records.eventName` log field value matches the regular expression pattern `GetFunctionCodeSigningConfig` or the `Records.eventName` log field value matches the regular expression pattern `GetFunctionConfiguration` or the `Records.eventName` log field value matches the regular expression pattern `GetFunctionEventInvokeConfig` or the `Records.eventName` log field value matches the regular expression pattern `GetFunctionUrlConfig` or the `Records.eventName` log field value matches the regular expression pattern `GetProvisionedConcurrencyConfig` or the `Records.eventName` log field value matches the regular expression pattern `GetRuntimeManagementConfig` or the `Records.eventName` log field value matches the regular expression pattern `Invoke` or the `Records.eventName` log field value matches the regular expression pattern `ListAliases` or the `Records.eventName` log field value matches the regular expression pattern `ListFunctionEventInvokeConfigs` or the `Records.eventName` log field value matches the regular expression pattern `ListFunctions` or the `Records.eventName` log field value matches the regular expression pattern `ListFunctionUrlConfigs` or the `Records.eventName` log field value matches the regular expression pattern `ListProvisionedConcurrencyConfigs` or the `Records.eventName` log field value matches the regular expression pattern `ListTags` or the `Records.eventName` log field value matches the regular expression pattern `ListVersionsByFunction` or the `Records.eventName` log field value matches the regular expression pattern `PublishVersion` or the `Records.eventName` log field value matches the regular expression pattern `RemovePermission` or the `Records.eventName` log field value matches the regular expression pattern `TagResource` or the `Records.eventName` log field value matches the regular expression pattern `UntagResource` or the `Records.eventName` log field value matches the regular expression pattern `UpdateFunctionCode` or the `Records.eventName` log field value matches the regular expression pattern `UpdateFunctionConfiguration` then, the `target.resource.resource_type` UDM field is set to `FUNCTION`. Else, if the `Records.eventName` log field value matches the regular expression pattern `CreateAlias` or the `Records.eventName` log field value matches the regular expression pattern `DeleteAlias` or the `Records.eventName` log field value matches the regular expression pattern `UpdateAlias` then, the `target.resource.resource_type` UDM field is set to `FUNCTION`. Else, if the `Records.eventName` log field value matches the regular expression pattern `CreateFunction` then, the `target.resource.resource_type` UDM field is set to `FUNCTION`. Else, if the `Records.eventName` log field value matches the regular expression pattern `DeleteLayerVersion` or the `Records.eventName` log field value matches the regular expression pattern `GetLayerVersion` or the `Records.eventName` log field value matches the regular expression pattern `GetLayerVersionByArn` or the `Records.eventName` log field value matches the regular expression pattern `GetLayerVersionPolicy` or the `Records.eventName` log field value matches the regular expression pattern `ListLayerVersions` or the `Records.eventName` log field value matches the regular expression pattern `PublishLayerVersion` then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`.
	`target.resource.attribute.cloud.environment`	If the `Records.eventName` log field value matches the regular expression pattern `AddPermission` or the `Records.eventName` log field value matches the regular expression pattern `CreateAlias` or the `Records.eventName` log field value matches the regular expression pattern `DeleteAlias` or the `Records.eventName` log field value matches the regular expression pattern `DeleteFunction` or the `Records.eventName` log field value matches the regular expression pattern `DeleteLayerVersion` or the `Records.eventName` log field value matches the regular expression pattern `DisableReplication` or the `Records.eventName` log field value matches the regular expression pattern `EnableReplication` or the `Records.eventName` log field value matches the regular expression pattern `GetFunction` or the `Records.eventName` log field value matches the regular expression pattern `GetFunctionCodeSigningConfig` or the `Records.eventName` log field value matches the regular expression pattern `GetFunctionConfiguration` or the `Records.eventName` log field value matches the regular expression pattern `GetFunctionEventInvokeConfig` or the `Records.eventName` log field value matches the regular expression pattern `GetFunctionUrlConfig` or the `Records.eventName` log field value matches the regular expression pattern `GetLayerVersion` or the `Records.eventName` log field value matches the regular expression pattern `GetLayerVersionByArn` or the `Records.eventName` log field value matches the regular expression pattern `GetLayerVersionPolicy` or the `Records.eventName` log field value matches the regular expression pattern `GetProvisionedConcurrencyConfig` or the `Records.eventName` log field value matches the regular expression pattern `GetRuntimeManagementConfig` or the `Records.eventName` log field value matches the regular expression pattern `Invoke` or the `Records.eventName` log field value matches the regular expression pattern `ListAliases` or the `Records.eventName` log field value matches the regular expression pattern `ListFunctionEventInvokeConfigs` or the `Records.eventName` log field value matches the regular expression pattern `ListFunctions` or the `Records.eventName` log field value matches the regular expression pattern `ListFunctionUrlConfigs` or the `Records.eventName` log field value matches the regular expression pattern `ListLayerVersions` or the `Records.eventName` log field value matches the regular expression pattern `ListProvisionedConcurrencyConfigs` or the `Records.eventName` log field value matches the regular expression pattern `ListTags` or the `Records.eventName` log field value matches the regular expression pattern `ListVersionsByFunction` or the `Records.eventName` log field value matches the regular expression pattern `PublishLayerVersion` or the `Records.eventName` log field value matches the regular expression pattern `PublishVersion` or the `Records.eventName` log field value matches the regular expression pattern `RemovePermission` or the `Records.eventName` log field value matches the regular expression pattern `TagResource` or the `Records.eventName` log field value matches the regular expression pattern `UntagResource` or the `Records.eventName` log field value matches the regular expression pattern `UpdateAlias` or the `Records.eventName` log field value matches the regular expression pattern `UpdateFunctionCode` or the `Records.eventName` log field value matches the regular expression pattern `UpdateFunctionConfiguration` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value matches the regular expression pattern `CreateFunction` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
	`target.resource_ancestors.resource_type`	If the `Records.eventName` log field value matches the regular expression pattern `CreateAlias` or the `Records.eventName` log field value matches the regular expression pattern `DeleteAlias` or the `Records.eventName` log field value matches the regular expression pattern `DeleteEventSourceMapping` or the `Records.eventName` log field value matches the regular expression pattern `CreateEventSourceMapping` or the `Records.eventName` log field value matches the regular expression pattern `ListEventSourceMappings` or the `Records.eventName` log field value matches the regular expression pattern `UpdateAlias` or the `Records.eventName` log field value matches the regular expression pattern `UpdateEventSourceMapping` then, the `target.resource_ancestors.resource_type` UDM field is set to `FUNCTION`.
	`target.resource_ancestors.attribute.cloud.environment`	If the `Records.eventName` log field value matches the regular expression pattern `CreateAlias` or the `Records.eventName` log field value matches the regular expression pattern `DeleteAlias` or the `Records.eventName` log field value matches the regular expression pattern `DeleteEventSourceMapping` or the `Records.eventName` log field value matches the regular expression pattern `CreateEventSourceMapping` or the `Records.eventName` log field value matches the regular expression pattern `ListEventSourceMappings` or the `Records.eventName` log field value matches the regular expression pattern `UpdateAlias` or the `Records.eventName` log field value matches the regular expression pattern `UpdateEventSourceMapping` then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.functionResponseTypes`	`target.resource.attribute.labels[req_function_response_types]`	Iterate through log field `Records.requestParameters.functionResponseTypes`, then the `target.resource.attribute.labels.key` UDM field is set to `req_function_response_types` and `Records.requestParameters.functionResponseTypes` log field is mapped to the `target.resource.attribute.labels.key` UDM field.
`Records.requestParameters.functionUrlAuthType`	`target.resource.attribute.labels[req_function_url_auth_type]`
`Records.requestParameters.functionVersion`	`target.resource_ancestors.attribute.labels[function_version]`
`Records.requestParameters.handler`	`target.resource_ancestors.attribute.labels[req_handler]`
`Records.requestParameters.ignored`	`target.resource_ancestors.attribute.labels[req_ignored]`
`Records.requestParameters.includeBlacklistedFeatures`	`target.resource_ancestors.attribute.labels[req_include_blacklisted_features]`
`Records.requestParameters.includeDeprecatedFeaturesAccess`	`target.resource_ancestors.attribute.labels[req_include_deprecated_features_access]`
`Records.requestParameters.includeDeprecatedRuntimeDetails`	`target.resource_ancestors.attribute.labels[req_include_deprecated_runtime_details]`
`Records.requestParameters.includePreviewFeatures`	`target.resource_ancestors.attribute.labels[req_include_preview_features]`
`Records.requestParameters.includeUnreservedConcurrentExecutionsMinimum`	`target.resource_ancestors.attribute.labels[req_include_unreserved_concurrent_executions_minimum]`
`Records.requestParameters.invocationType`	`target.resource_ancestors.attribute.labels[req_invocation_type]`
`Records.requestParameters.kMSKeyArn`	`target.resource_ancestors.attribute.labels[req_kms_key_arn]`
`Records.requestParameters.layerName`	`target.resource.name`	If the `Records.eventName` log field value matches the regular expression pattern `DeleteLayerVersion` or the `Records.eventName` log field value matches the regular expression pattern `GetLayerVersion` or the `Records.eventName` log field value matches the regular expression pattern `GetLayerVersionPolicy` or the `Records.eventName` log field value matches the regular expression pattern `ListLayerVersions` then, `Records.requestParameters.layerName` log field is mapped to the `target.resource.name` UDM field.
`Records.requestParameters.logType`	`target.resource_ancestors.attribute.labels[req_log_type]`
`Records.requestParameters.marker`	`target.resource_ancestors.attribute.labels[req_marker]`
`Records.requestParameters.masterArn`	`target.resource_ancestors.attribute.labels[req_master_arn]`
`Records.requestParameters.maxItems`	`target.resource_ancestors.attribute.labels[req_max_items]`
`Records.requestParameters.maximumBatchingWindowInSeconds`	`target.resource_ancestors.attribute.labels[req_maximum_batching_window_in_seconds]`
`Records.requestParameters.memorySize`	`target.resource.attribute.labels[req_memory_size]`
`Records.requestParameters.name`	`target.resource.attribute.labels[req_name]`	If the `Records.eventName` log field value matches the regular expression pattern `DeleteAlias` then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field.
`Records.requestParameters.packageType`	`target.resource.attribute.labels[req_package_type]`
`Records.requestParameters.principal`	`target.resource.attribute.labels[req_principal]`
`Records.requestParameters.publish`	`target.resource.attribute.labels[req_publish]`
`Records.requestParameters.qualifier`	`target.resource.attribute.labels[req_qualifier]`
`Records.requestParameters.resource`	`target.resource.name`	If the `Records.eventName` log field value matches the regular expression pattern `ListTags` or the `Records.eventName` log field value matches the regular expression pattern `TagResource` or the `Records.eventName` log field value matches the regular expression pattern `UntagResource` then, `Records.requestParameters.resource` log field is mapped to the `target.resource.name` UDM field.
`Records.requestParameters.revisionId`	`target.resource.attribute.labels[res_revisionId]`
`Records.requestParameters.runtime`	`target.resource.attribute.labels[req_runtime]`
`Records.requestParameters.s3Bucket`	`target.resource.attribute.labels[req_s3_bucket]`
`Records.requestParameters.s3Key`	`target.resource.attribute.labels[req_s3_key]`
`Records.requestParameters.s3ObjectVersion`	`target.resource.attribute.labels[req_s3_object_version]`
`Records.requestParameters.scalingConfig.maximumConcurrency`	`target.resource.attribute.labels[req_scaling_config_maximum_concurrency]`
`Records.requestParameters.snapStart.applyOn`	`target.resource.attribute.labels[req_snap_start_apply_on]`
`Records.requestParameters.sourceAccount`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value matches the regular expression pattern `DeleteAlias` then, `Records.requestParameters.sourceAccount` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `SERVICE_ACCOUNT` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.sourceArn`	`principal.resource.name`
`Records.requestParameters.statementId`	`target.resource.attribute.labels[req_statement_id]`
`Records.requestParameters.tagKeys`	`target.resource.attribute.labels[req_tag_keys]`	Iterate through log field `Records.requestParameters.tagKeys`, then the `target.resource.attribute.labels.key` UDM field is set to `req_tag_keys` and `Records.requestParameters.tagKeys` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.timeout`	`target.resource.attribute.labels[req_timeout]`
`Records.requestParameters.tracingConfig.mode`	`target.resource.attribute.labels[req_tracing_config_mode]`
`Records.requestParameters.versionNumber`	`target.resource.attribute.labels[req_version_number]`
`Records.responseElements.aliasArn`	`target.resource.name`	If the `Records.eventName` log field value matches the regular expression pattern `CreateAlias` or the `Records.eventName` log field value matches the regular expression pattern `UpdateAlias` then, `Records.responseElements.aliasArn` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.architectures`	`target.resource.attribute.labels[res_architectures]`	Iterate through log field `Records.responseElements.architectures`, then the `target.resource.attribute.labels.key` UDM field is set to `res_architectures` and `Records.responseElements.architectures` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.batchSize`	`target.resource.attribute.labels[res_batch_size]`
`Records.responseElements.codeSha256`	`target.resource.attribute.labels[res_code_sha256]`
`Records.requestParameters.codeSha256`	`target.resource.attribute.labels[res_code_sha256]`
`Records.responseElements.codeSize`	`target.resource.attribute.labels[res_code_size]`
`Records.responseElements.compatibleArchitectures`	`target.resource.attribute.labels[res_compatible_architectures]`	Iterate through log field `Records.responseElements.compatibleArchitectures`, then the `target.resource.attribute.labels.key` UDM field is set to `res_compatible_architectures` and `Records.responseElements.compatibleArchitectures` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.compatibleRuntimes`	`target.resource.attribute.labels[res_compatible_runtimes]`	Iterate through log field `Records.responseElements.compatibleRuntimes`, then the `target.resource.attribute.labels.key` UDM field is set to `res_compatible_runtimes` and `Records.responseElements.compatibleRuntimes` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.content.codeSha256`	`target.resource.attribute.labels[res_content_code_sha256]`
`Records.responseElements.content.codeSize`	`target.resource.attribute.labels[res_content_code_size]`
`Records.responseElements.content.uncompressedCodeSize`	`target.resource.attribute.labels[res_content_uncompressed_code_size]`
`Records.responseElements.createdDate`	`target.resource.attribute.creation_time`
`Records.responseElements.description`	`target.resource.attribute.labels[res_description]`
`Records.requestParameters.description`	`target.resource.attribute.labels[res_description]`
`Records.responseElements.ephemeralStorage.size`	`target.resource.attribute.labels[res_ephemeral_storage_size]`
`Records.responseElements.eventSourceArn`	`target.resource.name`	If the `Records.eventName` log field value matches the regular expression pattern `CreateEventSourceMapping` or the `Records.eventName` log field value matches the regular expression pattern `DeleteEventSourceMapping` or the `Records.eventName` log field value matches the regular expression pattern `ListEventSourceMappings` or the `Records.eventName` log field value matches the regular expression pattern `UpdateEventSourceMapping` then, `Records.responseElements.eventSourceArn` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.functionArn`	`target.resource.name`	If the `Records.eventName` log field value matches the regular expression pattern `CreateFunction` or the `Records.eventName` log field value matches the regular expression pattern `PublishVersion` or the `Records.eventName` log field value matches the regular expression pattern `UpdateFunctionCode` or the `Records.eventName` log field value matches the regular expression pattern `UpdateFunctionConfiguration` then, `Records.responseElements.functionArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `CreateEventSourceMapping` or the `Records.eventName` log field value matches the regular expression pattern `DeleteEventSourceMapping` or the `Records.eventName` log field value matches the regular expression pattern `UpdateEventSourceMapping` then, `Records.responseElements.functionArn` log field is mapped to the `target.resource_ancestors.name` UDM field.
`Records.responseElements.functionResponseTypes`	`target.resource_ancestors.attribute.labels[res_function_response_types]`	Iterate through log field `Records.responseElements.functionResponseTypes`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `res_function_response_types` and `Records.responseElements.functionResponseTypes` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.responseElements.functionVersion`	`target.resource_ancestors.attribute.labels[res_function_version]`
`Records.responseElements.handler`	`target.resource_ancestors.attribute.labels[res_handler]`
`Records.responseElements.lastModified`	`target.resource.attribute.last_update_time`
`Records.responseElements.lastUpdateStatus`	`target.resource_ancestors.attribute.labels[res_last_update_status]`
`Records.responseElements.lastUpdateStatusReason`	`target.resource_ancestors.attribute.labels[res_last_update_status_reason]`
`Records.responseElements.lastUpdateStatusReasonCode`	`target.resource_ancestors.attribute.labels[res_last_update_status_reason_code]`
`Records.responseElements.layerArn`	`target.resource.name`	If the `Records.eventName` log field value matches the regular expression pattern `PublishLayerVersion` then, `Records.responseElements.layerArn` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.layerVersionArn`	`target.resource.attribute.labels[res_layer_version_arn]`
`Records.responseElements.layers.arn`	`target.resource_ancestors.name`	If the `Records.eventName` log field value matches the regular expression pattern `PublishVersion` then, Iterate through log field `Records.responseElements.layers`, then `Records.responseElements.layers.arn` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.layers.codeSize`	`target.resource_ancestors.attribute.labels[res_layers_code_size]`	If the `Records.eventName` log field value matches the regular expression pattern `PublishVersion` then, Iterate through log field `Records.responseElements.layers`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `res_layers_code_size` and `Records.responseElements.layers.codeSize` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.responseElements.layers.uncompressedCodeSize`	`target.resource_ancestors.attribute.labels[res_layers_uncompressed_code_size]`	If the `Records.eventName` log field value matches the regular expression pattern `PublishVersion` then, Iterate through log field `Records.responseElements.layers`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `res_layers_uncompressed_code_size` and `Records.responseElements.layers.uncompressedCodeSize` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.responseElements.loggingConfig.logFormat`	`target.resource.attribute.labels[res_logging_config_log_format]`
`Records.responseElements.loggingConfig.logGroup`	`target.resource.attribute.labels[res_logging_config_log_group]`
`Records.responseElements.masterArn`	`target.resource.attribute.labels[res_master_arn]`
`Records.responseElements.maximumBatchingWindowInSeconds`	`target.resource.attribute.labels[res_maximum_batching_window_in_seconds]`
`Records.responseElements.memorySize`	`target.resource.attribute.labels[res_memory_size]`
`Records.responseElements.name`	`target.resource.attribute.labels[res_name]`	If the `Records.responseElements.aliasArn` log field value is empty and the `Records.eventName` log field value matches the regular expression pattern `DeleteAlias` then, `Records.responseElements.name` log field is mapped to the `target.resource.name` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `res_name` and `Records.responseElements.name` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.packageType`	`target.resource.attribute.labels[res_package_type]`
`Records.responseElements.revisionId`	`target.resource.attribute.labels[res_revision_id]`
`Records.responseElements.role`	`target.resource.attribute.roles.name`	If the `Records.responseElements.role` log field value is not empty then, `Records.responseElements.role` log field is mapped to the `target.resource.attribute.roles.name` UDM field. Else, if the `Records.requestParameters.role` log field value is not empty then, `Records.requestParameters.role` log field is mapped to the `target.resource.attribute.roles.name` UDM field.
`Records.requestParameters.role`	`target.resource.attribute.roles.name`	If the `Records.responseElements.role` log field value is not empty then, `Records.responseElements.role` log field is mapped to the `target.resource.attribute.roles.name` UDM field. Else, if the `Records.requestParameters.role` log field value is not empty then, `Records.requestParameters.role` log field is mapped to the `target.resource.attribute.roles.name` UDM field.
`Records.responseElements.runtime`	`target.resource.attribute.labels[res_runtime]`
`Records.responseElements.runtimeVersionConfig.runtimeVersionArn`	`target.resource.attribute.labels[res_runtime_version_config_runtime_version_arn]`
`Records.responseElements.scalingConfig.maximumConcurrency`	`target.resource.attribute.labels[res_scaling_config_maximum_concurrency]`
`Records.responseElements.snapStart.applyOn`	`target.resource.attribute.labels[res_snap_start_apply_on]`
`Records.responseElements.snapStart.optimizationStatus`	`target.resource.attribute.labels[res_snap_start_optimization_status]`
`Records.responseElements.state`	`target.resource.attribute.labels[res_state]`
`Records.responseElements.stateReason`	`target.resource.attribute.labels[res_state_reason]`
`Records.responseElements.stateReasonCode`	`target.resource.attribute.labels[res_state_reason_code]`
`Records.responseElements.stateTransitionReason`	`target.resource.attribute.labels[res_state_transition_reason]`
`Records.responseElements.statement`	`target.resource.attribute.labels[res_statement]`
`Records.responseElements.timeout`	`target.resource.attribute.labels[res_timeout]`
`Records.responseElements.tracingConfig.mode`	`target.resource.attribute.labels[res_tracing_config_mode]`
`Records.responseElements.uUID`	`target.resource.product_object_id`
`Records.responseElements.version`	`target.resource.attribute.labels[res_version]`
`Records.responseElements.vpcConfig.ipv6AllowedForDualStack`	`target.resource.attribute.labels[res_vpc_config_ipv6_allowed_for_dual_stack]`
`Records.responseElements.vpcConfig.securityGroupIds`	`target.resource.attribute.labels[res_vpc_config_security_group_ids]`	Iterate through log field `Records.responseElements.vpcConfig.securityGroupIds`, then the `target.resource.attribute.labels.key` UDM field is set to `res_vpc_config_security_group_ids` and `Records.responseElements.vpcConfig.securityGroupIds` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpcConfig.subnetIds`	`target.resource.attribute.labels[res_vpc_config_subnet_ids]`	Iterate through log field `Records.responseElements.vpcConfig.subnetIds`, then the `target.resource.attribute.labels.key` UDM field is set to `res_vpc_config_subnet_ids` and `Records.responseElements.vpcConfig.subnetIds` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpcConfig.vpcId`	`target.resource.attribute.labels[res_vpc_config_vpc_id]`

Field mapping reference: AWS CloudTrail - RDS

The following table lists the log fields for the RDS log type and their corresponding UDM fields.

Log field	UDM mapping	Logic
`Records.requestParameters.allocatedStorage`	`target.resource.attribute.labels[req_allocated_storage]`
`Records.requestParameters.allowEngineModeChange`	`target.resource.attribute.labels[req_allow_engine_mode_change]`
`Records.requestParameters.allowMajorVersionUpgrade`	`target.resource.attribute.labels[req_allow_major_version_upgrade]`
`Records.requestParameters.applyAction`	`target.resource.attribute.labels[req_apply_action]`
`Records.requestParameters.applyImmediately`	`target.resource.attribute.labels[req_apply_immediately]`
`Records.requestParameters.attributeName`	`target.resource.attribute.labels[req_attribute_name]`
`Records.requestParameters.autoMinorVersionUpgrade`	`target.resource.attribute.labels[req_auto_minor_version_upgrade]`
`Records.requestParameters.availabilityZone`	`target.resource.attribute.labels[req_availability_zone]`
`Records.requestParameters.backupRetentionPeriod`	`target.resource.attribute.labels[req_backup_retention_period]`
`Records.requestParameters.cACertificateIdentifier`	`target.resource.attribute.labels[req_ca_certificate_identifier]`
`Records.requestParameters.certificateIdentifier`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `DescribeCertificates` then, `Records.requestParameters.certificateIdentifier` log field is mapped to the `target.resource.product_object_id` UDM field. If the `Records.requestParameters.certificateIdentifier` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `CREDENTIAL` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.cloudwatchLogsExportConfiguration.enableLogTypes`	`target.resource.attribute.labels[req_cloudwatch_logs_export_configuration_enable_log_types]`	Iterate through log field `Records.requestParameters.cloudwatchLogsExportConfiguration.enableLogTypes`, then the `target.resource.attribute.labels.key` UDM field is set to `req_cloudwatch_logs_export_configuration_enable_log_types` and `Records.requestParameters.cloudwatchLogsExportConfiguration.enableLogTypes` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.copyTagsToSnapshot`	`target.resource.attribute.labels[req_copy_tags_to_snapshot]`
`Records.requestParameters.dBClusterIdentifier`	`target.resource.product_object_id`	If the `Records.eventName` log field value contain one of the following values `DescribeDBClusterEndpoints` `DescribeDBClusters` then, `Records.requestParameters.dBClusterIdentifier` log field is mapped to the `target.resource.product_object_id` UDM field. If the `Records.requestParameters.dBClusterIdentifier` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `CLUSTER` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.dBClusterParameterGroupName`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `DescribeDBClusterEndpoints` `DescribeDBClusterParameters` then, `Records.requestParameters.dBClusterParameterGroupName` log field is mapped to the `target.resource.name` UDM field. If the `Records.requestParameters.dBClusterParameterGroupName` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.dBClusterSnapshotIdentifier`	`target.resource.attribute.labels[res_db_cluster_snapshot_identifier]`
`Records.requestParameters.dBInstanceClass`	`target.resource.attribute.labels[res_db_instance_class]`
`Records.requestParameters.dBName`	`target.resource.attribute.labels[req_db_name]`
`Records.requestParameters.dBProxyName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `DescribeDBProxies` then, `Records.requestParameters.dBProxyName` log field is mapped to the `target.resource.name` UDM field. If the `Records.requestParameters.dBProxyName` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_db_proxy_name` and `Records.requestParameters.dBProxyName` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.dBSecurityGroupName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `DescribeDBSecurityGroups` then, `Records.requestParameters.dBSecurityGroupName` log field is mapped to the `target.resource.name` UDM field. If the `Records.requestParameters.dBSecurityGroupName` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.dBSnapshotIdentifier`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `DescribeDBSnapshotAttributes` then, `Records.requestParameters.dBSnapshotIdentifier` log field is mapped to the `target.resource.product_object_id` UDM field. If the `Records.requestParameters.dBSnapshotIdentifier` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `SNAPSHOT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.dbiResourceId`	`target.resource.attribute.labels[req_dbi_resource_id]`
`Records.requestParameters.defaultOnly`	`target.resource.attribute.labels[req_default_only]`
`Records.requestParameters.deleteAutomatedBackups`	`target.resource.attribute.labels[req_delete_automated_backups]`
`Records.requestParameters.deletionProtection`	`target.resource.attribute.labels[req_deletion_protection]`
`Records.requestParameters.duration`	`target.resource.attribute.labels[req_duration]`
`Records.requestParameters.enableIAMDatabaseAuthentication`	`target.resource.attribute.labels[req_enable_iam_database_authentication]`
`Records.requestParameters.enablePerformanceInsights`	`target.resource.attribute.labels[req_enable_performance_insights]`
`Records.requestParameters.endTime`	`target.resource.attribute.labels[req_end_time]`
`Records.requestParameters.engine`	`target.resource.attribute.labels[req_engine]`
`Records.requestParameters.engineMode`	`target.resource.attribute.labels[req_engine_mode]`
`Records.requestParameters.engineName`	`target.resource.attribute.labels[req_engine_name]`
`Records.requestParameters.engineVersion`	`target.resource.attribute.labels[req_engine_version]`
`Records.requestParameters.eventCategories`	`target.resource.attribute.labels[req_event_categories]`	Iterate through log field `Records.requestParameters.eventCategories`, then the `target.resource.attribute.labels.key` UDM field is set to `req_event_categories` and `Records.requestParameters.eventCategories` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.exportTaskIdentifier`	`target.resource.product_object_id`	If the `Records.requestParameters.exportTaskIdentifier` log field value is not empty and the `Records.eventName` log field value contain one of the following values `DescribeEngineDefaultParameters` `StartExportTask` then, `Records.requestParameters.exportTaskIdentifier` log field is mapped to the `target.resource.product_object_id` UDM field.
`Records.requestParameters.fileLastWritten`	`target.resource.attribute.labels[req_file_last_written]`
`Records.requestParameters.fileSize`	`target.resource.attribute.labels[req_file_size]`
`Records.requestParameters.filenameContains`	`target.resource.attribute.labels[req_file_name_contains]`
`Records.requestParameters.filters.name`	`target.resource.attribute.labels[req_filters_name]`	Iterate through log field , then Iterate through log field `Records.requestParameters.filters.values`, then the `target.resource.attribute.labels.key` UDM field is set to `filters_values` and `Records.requestParameters.filters.values` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Iterate through log field , then the `target.resource.attribute.labels.key` UDM field is set to `filters_name` and `Records.requestParameters.filters.name` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.filters.values`	`target.resource.attribute.labels[req_filters_name]`	Iterate through log field , then Iterate through log field `Records.requestParameters.filters.values`, then the `target.resource.attribute.labels.key` UDM field is set to `filters_values` and `Records.requestParameters.filters.values` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Iterate through log field , then the `target.resource.attribute.labels.key` UDM field is set to `filters_name` and `Records.requestParameters.filters.name` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.finalDBSnapshotIdentifier`	`target.resource.attribute.labels[req_final_db_snapshot_identifier]`
`Records.requestParameters.forceFailover`	`target.resource.attribute.labels[req_force_fail_over]`
`Records.requestParameters.iamRoleArn`	`target.resource.attribute.labels[req_iam_role_arn]`
`Records.requestParameters.includeAll`	`target.resource.attribute.labels[req_include_all]`
`Records.requestParameters.includePublic`	`target.resource.attribute.labels[req_include_public]`
`Records.requestParameters.includeShared`	`target.resource.attribute.labels[req_include_shared]`
`Records.requestParameters.kmsKeyId`	`target.resource.attribute.labels[req_kms_key_id]`
`Records.requestParameters.lastUpdatedAfter`	`target.resource.attribute.labels[req_last_updated_after]`
`Records.requestParameters.licenseModel`	`target.resource.attribute.labels[req_license_model]`
`Records.requestParameters.listSupportedCharacterSets`	`target.resource.attribute.labels[req_list_supported_character_sets]`
`Records.requestParameters.listSupportedTimezones`	`target.resource.attribute.labels[req_list_supported_time_zones]`
`Records.requestParameters.locale`	`additional.fields[locale]`
`Records.requestParameters.logFileName`	`target.file.full_path`
`Records.requestParameters.majorEngineVersion`	`target.resource.attribute.labels[req_major_engine_version]`
`Records.requestParameters.marker`	`target.resource.attribute.labels[req_marker]`
`Records.requestParameters.masterUserPassword`	`target.resource.attribute.labels[req_master_user_password]`
`Records.requestParameters.masterUsername`	`target.resource.attribute.labels[req_master_user_name]`
`Records.requestParameters.maxAllocatedStorage`	`target.resource.attribute.labels[req_max_allocated_storage]`
`Records.requestParameters.maxRecords`	`target.resource.attribute.labels[req_max_records]`
`Records.requestParameters.monitoringInterval`	`target.resource.attribute.labels[req_monitoring_interval]`
`Records.requestParameters.monitoringRoleArn`	`target.resource.attribute.labels[req_monitoring_role_arn]`
`Records.requestParameters.multiAZ`	`target.resource.attribute.labels[req_multi_az]`
`Records.requestParameters.multiTenant`	`target.resource.attribute.labels[req_multi_tenant]`
`Records.requestParameters.networkType`	`target.resource.attribute.labels[req_network_type]`
`Records.requestParameters.numberOfLines`	`target.resource.attribute.labels[req_number_of_lines]`
`Records.requestParameters.optInType`	`security_result.action`	If the `Records.requestParameters.optInType` log field value is equal to `immediate` then, the `security_result.action` UDM field is set to `ALLOW`. Else, if the `Records.requestParameters.optInType` log field value is equal to `undo-opt-in` then, the `security_result.action` UDM field is set to `BLOCK`.
`Records.requestParameters.optionGroupName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `DescribeOptionGroups` then, `Records.requestParameters.optionGroupName` log field is mapped to the `target.resource.name` UDM field. If the `Records.requestParameters.optionGroupName` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.parameters.applyMethod`	`target.resource.attribute.labels[req_parameters_apply_method]`	Iterate through log field `Records.requestParameters.parameters`, then the `target.resource.attribute.labels.key` UDM field is set to `req_parameters_apply_method` and `Records.requestParameters.parameters.applyMethod` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.parameters.isModifiable`	`target.resource.attribute.labels[req_parameters_is_modifiable]`	Iterate through log field `Records.requestParameters.parameters`, then the `target.resource.attribute.labels.key` UDM field is set to `req_parameters_is_modifiable` and `Records.requestParameters.parameters.isModifiable` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.parameters.parameterName`	`target.resource.attribute.labels[req_parameters_parameter_name]`	Iterate through log field `Records.requestParameters.parameters`, then the `target.resource.attribute.labels.key` UDM field is set to `req_parameters_parameter_name` and `Records.requestParameters.parameters.parameterName` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.parameters.parameterValue`	`target.resource.attribute.labels[req_parameters_parameter_value]`	Iterate through log field `Records.requestParameters.parameters`, then the `target.resource.attribute.labels.key` UDM field is set to `req_parameters_parameter_value` and `Records.requestParameters.parameters.parameterValue` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.performanceInsightsKMSKeyId`	`target.resource.attribute.labels[req_pre_signed_url]`
`Records.requestParameters.performanceInsightsRetentionPeriod`	`target.resource.attribute.labels[req_pre_signed_url]`
`Records.requestParameters.port`	`target.port`	If the `Records.requestParameters.port` log field value is not empty then, `Records.requestParameters.port` log field is mapped to the `target.port` UDM field. Else, if the `Records.responseElements.port` log field value is not empty then, `Records.responseElements.port` log field is mapped to the `target.port` UDM field. Else, if the `Records.responseElements.dbInstancePort` log field value is not empty then, `Records.responseElements.dbInstancePort` log field is mapped to the `target.port` UDM field.
`Records.responseElements.dbInstancePort`	`target.port`	If the `Records.requestParameters.port` log field value is not empty then, `Records.requestParameters.port` log field is mapped to the `target.port` UDM field. Else, if the `Records.responseElements.port` log field value is not empty then, `Records.responseElements.port` log field is mapped to the `target.port` UDM field. Else, if the `Records.responseElements.dbInstancePort` log field value is not empty then, `Records.responseElements.dbInstancePort` log field is mapped to the `target.port` UDM field.
`Records.responseElements.port`	`target.port`	If the `Records.requestParameters.port` log field value is not empty then, `Records.requestParameters.port` log field is mapped to the `target.port` UDM field. Else, if the `Records.responseElements.port` log field value is not empty then, `Records.responseElements.port` log field is mapped to the `target.port` UDM field. Else, if the `Records.responseElements.dbInstancePort` log field value is not empty then, `Records.responseElements.dbInstancePort` log field is mapped to the `target.port` UDM field.
`Records.requestParameters.preSignedUrl`	`target.resource.attribute.labels[req_pre_signed_url]`
`Records.requestParameters.preferredBackupWindow`	`target.resource.attribute.labels[req_preferred_backup_window]`
`Records.requestParameters.preferredMaintenanceWindow`	`target.resource.attribute.labels[req_preferred_maintenance_window]`
`Records.requestParameters.publiclyAccessible`	`target.resource.attribute.labels[req_publicly_accessible]`
`Records.requestParameters.reservedDBInstanceId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `DescribeReservedDBInstances` then, `Records.requestParameters.reservedDBInstanceId` log field is mapped to the `target.resource.product_object_id` UDM field. If the `Records.requestParameters.reservedDBInstanceId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `DATABASE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.resourceName`	`target.resource.name`	`Records.requestParameters.resourceName` log field is mapped to the `target.resource.name` UDM field. If the `Records.requestParameters.resourceName` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `DATABASE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.s3BucketName`	`target.resource.attribute.labels[s3_bucket_name]`
`Records.requestParameters.s3Prefix`	`target.resource.attribute.labels[res_s3_prefix]`
`Records.requestParameters.skipFinalSnapshot`	`target.resource.attribute.labels[req_skip_final_snap_shot]`
`Records.requestParameters.snapshotType`	`target.resource.attribute.labels[req_snap_shot_type]`
`Records.requestParameters.source`	`target.resource.attribute.labels[req_source]`
`Records.requestParameters.sourceArn`	`target.resource_ancestors.name`	If the `Records.eventName` log field value is equal to `DescribeExportTasks` then, `Records.requestParameters.sourceArn` log field is mapped to the `target.resource_ancestors.name` UDM field.
`Records.requestParameters.sourceDBClusterSnapshotIdentifier`	`src.resource.product_object_id`	If the `Records.eventName` log field value is equal to `CopyDBClusterSnapshot` then, `Records.requestParameters.sourceDBClusterSnapshotIdentifier` log field is mapped to the `src.resource.product_object_id` UDM field. If the `Records.requestParameters.sourceDBClusterSnapshotIdentifier` log field value is not empty then, the `src.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and the `src.resource.resource_type` UDM field is set to `SNAPSHOT`.
`Records.requestParameters.sourceDBParameterGroupIdentifier`	`src.resource.name`	If the `Records.eventName` log field value is equal to `CopyDBParameterGroup` then, `Records.requestParameters.sourceDBParameterGroupIdentifier` log field is mapped to the `src.resource.name` UDM field. If the `Records.requestParameters.sourceDBParameterGroupIdentifier` log field value is not empty then, the `src.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and the `src.resource.resource_type` UDM field is set to `ACCESS_POLICY`. Else, the `target.resource.attribute.labels.key` UDM field is set to `source_db_parameter_group_identifier` and `Records.requestParameters.sourceDBParameterGroupIdentifier` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.sourceDBSnapshotIdentifier`	`src.resource.name`	If the `Records.eventName` log field value is equal to `CopyDBSnapshot` then, `Records.requestParameters.sourceDBSnapshotIdentifier` log field is mapped to the `src.resource.name` UDM field. If the `Records.requestParameters.sourceDBSnapshotIdentifier` log field value is not empty then, the `src.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and the `src.resource.resource_type` UDM field is set to `SNAPSHOT`.
`Records.requestParameters.sourceIdentifier`	`target.resource.attribute.labels[req_source_identifier]`
`Records.requestParameters.sourceType`	`target.resource.attribute.labels[req_source_type]`
`Records.requestParameters.startTime`	`target.resource.attribute.labels[req_start_time]`
`Records.requestParameters.storageEncrypted`	`target.resource.attribute.labels[req_storage_encrypted]`
`Records.requestParameters.storageType`	`target.resource.attribute.labels[req_storage_type]`
`Records.requestParameters.tags.key`	`target.resource.attribute.labels[tags]`	Iterate through log field `Records.requestParameters.tags`, then `Records.requestParameters.tags.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.tags.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.tags.value`	`target.resource.attribute.labels[tags]`	Iterate through log field `Records.requestParameters.tags`, then `Records.requestParameters.tags.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.tags.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.targetDBClusterSnapshotIdentifier`	`target.resource.attribute.labels[req_target_dbcluster_snapshot_identifier]`	If the `Records.responseElements.dBClusterSnapshotArn` log field value is empty then, `Records.requestParameters.targetDBClusterSnapshotIdentifier` log field is mapped to the `target.resource.name` UDM field. If the `Records.requestParameters.targetDBClusterSnapshotIdentifier` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and the `target.resource.resource_type` UDM field is set to `SNAPSHOT`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_target_dbcluster_snapshot_identifier` and `Records.requestParameters.targetDBClusterSnapshotIdentifier` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.targetDBParameterGroupDescription`	`target.resource.attribute.labels[req_target_db_parameter_group_description]`
`Records.requestParameters.targetDBParameterGroupIdentifier`	`target.resource.attribute.labels[req_target_db_parameter_group_identifier]`
`Records.requestParameters.targetDBSnapshotIdentifier`	`target.resource.attribute.labels[req_target_db_snapshot_identifier]`
`Records.requestParameters.targetGroupName`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `DescribeDBProxyTargetGroups` `DescribeDBProxyTargets` then, `Records.requestParameters.targetGroupName` log field is mapped to the `target.resource.name` UDM field. If the `Records.requestParameters.targetGroupName` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.valuesToAdd`	`target.resource.attribute.labels[req_values_to_add]`	Iterate through log field `Records.requestParameters.valuesToAdd`, then the `target.resource.attribute.labels.key` UDM field is set to `req_values_to_add` and `Records.requestParameters.valuesToAdd` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.valuesToRemove`	`target.resource.attribute.labels[req_values_to_remove]`	Iterate through log field `Records.requestParameters.valuesToRemove`, then the `target.resource.attribute.labels.key` UDM field is set to `req_values_to_remove` and `Records.requestParameters.valuesToRemove` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.vpcSecurityGroupIds`	`target.resource.attribute.labels[req_vpc_security_group_ids]`	Iterate through log field `Records.requestParameters.vpcSecurityGroupIds`, then the `target.resource.attribute.labels.key` UDM field is set to `req_vpc_security_group_ids` and `Records.requestParameters.vpcSecurityGroupIds` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.allocatedStorage`	`target.resource.attribute.labels[res_allocated_storage]`
`Records.responseElements.associatedRoles.featureName`	`target.resource.attribute.labels[res_associated_roles_feature_name]`	Iterate through log field `Records.responseElements.associatedRoles`, then the `target.resource.attribute.labels.key` UDM field is set to `res_associated_roles_feature_name` and `Records.responseElements.associatedRoles.featureName` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.associatedRoles.roleArn`	`target.resource.attribute.labels[res_associated_roles_role_arn]`	Iterate through log field `Records.responseElements.associatedRoles`, then the `target.resource.attribute.labels.key` UDM field is set to `res_associated_roles_role_arn` and `Records.responseElements.associatedRoles.roleArn` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.associatedRoles.status`	`target.resource.attribute.labels[res_associated_roles_status]`	Iterate through log field `Records.responseElements.associatedRoles`, then the `target.resource.attribute.labels.key` UDM field is set to `res_associated_roles_status` and `Records.responseElements.associatedRoles.status` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.autoMinorVersionUpgrade`	`target.resource.attribute.labels[res_auto_minor_version_upgrade]`
`Records.responseElements.automaticRestartTime`	`target.resource.attribute.labels[res_automatic_restart_time]`
`Records.responseElements.availabilityZone`	`target.resource.attribute.cloud.availability_zone`
`Records.responseElements.availabilityZones`	`target.resource.attribute.cloud.availability_zone`	Iterate through log field `Records.responseElements.availabilityZones`, then If the `index` value is equal to `0` then, `Records.responseElements.availabilityZones` log field is mapped to the `target.resource.attribute.cloud.availability_zone` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `availability_zones` and `Records.responseElements.availabilityZones` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.backupRetentionPeriod`	`target.resource.attribute.labels[res_backup_retention_period]`
`Records.responseElements.backupTarget`	`target.resource.attribute.labels[res_backup_target]`
`Records.responseElements.cACertificateIdentifier`	`target.resource.attribute.labels[res_ca_certificate_identifier]`
`Records.responseElements.certificateDetails.cAIdentifier`	`target.resource.attribute.labels[res_certificate_details_ca_identifier]`
`Records.responseElements.certificateDetails.validTill`	`target.resource.attribute.labels[res_certificate_details_valid_till]`
`Records.responseElements.clusterCreateTime`	`target.resource.attribute.creation_time`	If the `Records.eventName` log field value contain one of the following values `CreateDBCluster` `DeleteDBCluster` `FailoverDBCluster` then, `Records.responseElements.clusterCreateTime` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteDBClusterSnapshot` `CreateDBClusterSnapshot` then, `Records.responseElements.clusterCreateTime` log field is mapped to the `target.resource_ancestors.attribute.creation_time` UDM field.
`Records.responseElements.copyTagsToSnapshot`	`target.resource.attribute.labels[res_copy_tags_to_snapshot]`
`Records.responseElements.crossAccountClone`	`target.resource.attribute.labels[res_cross_account_clone]`
`Records.responseElements.customerOwnedIpEnabled`	`target.resource.attribute.labels[res_customer_owned_ip_enabled]`
`Records.responseElements.dBClusterArn`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateDBCluster` `DeleteDBCluster` `FailoverDBCluster` `ModifyDBCluster` then, `Records.responseElements.dBClusterArn` log field is mapped to the `target.resource.name` UDM field. If the `Records.responseElements.dBClusterArn` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and the `target.resource.resource_type` UDM field is set to `CLUSTER`.
`Records.responseElements.dBClusterIdentifier`	`target.resource.attribute.labels[res_db_cluster_identifier]`	If the `Records.eventName` log field value is equal to `CopyDBClusterSnapshot` and if the `Records.responseElements.dBClusterIdentifier` log field value is not empty then, `Records.responseElements.dBClusterIdentifier` log field is mapped to the `src.resource_ancestors.product_object_id` UDM field and the `src.resource_ancestors.resource_type` UDM field is set to `CLUSTER` and the `src.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.dBClusterIdentifier` log field value is not empty then, `Records.requestParameters.dBClusterIdentifier` log field is mapped to the `src.resource_ancestors.product_object_id` UDM field and the `src.resource_ancestors.resource_type` UDM field is set to `CLUSTER` and the `src.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateDBClusterSnapshot` `DeleteDBClusterSnapshot` and if the `Records.responseElements.dBClusterIdentifier` log field value is not empty then, `Records.responseElements.dBClusterIdentifier` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `CLUSTER` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.dBClusterIdentifier` log field value is not empty then, `Records.requestParameters.dBClusterIdentifier` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `CLUSTER` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `db_cluster_identifier` and `Records.responseElements.dBClusterIdentifier` log field is mapped to the `target.resource.attribute.labels.value` UDM field and the `target.resource.attribute.labels.key` UDM field is set to `db_cluster_identifier` and `Records.requestParameters.dBClusterIdentifier` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.dBClusterIdentifier`	`target.resource.attribute.labels[res_db_cluster_identifier]`	If the `Records.eventName` log field value is equal to `CopyDBClusterSnapshot` and if the `Records.responseElements.dBClusterIdentifier` log field value is not empty then, `Records.responseElements.dBClusterIdentifier` log field is mapped to the `src.resource_ancestors.product_object_id` UDM field and the `src.resource_ancestors.resource_type` UDM field is set to `CLUSTER` and the `src.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.dBClusterIdentifier` log field value is not empty then, `Records.requestParameters.dBClusterIdentifier` log field is mapped to the `src.resource_ancestors.product_object_id` UDM field and the `src.resource_ancestors.resource_type` UDM field is set to `CLUSTER` and the `src.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateDBClusterSnapshot` `DeleteDBClusterSnapshot` and if the `Records.responseElements.dBClusterIdentifier` log field value is not empty then, `Records.responseElements.dBClusterIdentifier` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `CLUSTER` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.dBClusterIdentifier` log field value is not empty then, `Records.requestParameters.dBClusterIdentifier` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `CLUSTER` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `db_cluster_identifier` and `Records.responseElements.dBClusterIdentifier` log field is mapped to the `target.resource.attribute.labels.value` UDM field and the `target.resource.attribute.labels.key` UDM field is set to `db_cluster_identifier` and `Records.requestParameters.dBClusterIdentifier` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.dBClusterMembers.dBClusterParameterGroupStatus`	`target.resource.attribute.labels[res_db_cluster_members_db_cluster_parameter_group_status]`	Iterate through log field `Records.responseElements.dBClusterMembers`, then the `target.resource.attribute.labels.key` UDM field is set to `res_db_cluster_members_db_cluster_parameter_group_status` and `Records.responseElements.dBClusterMembers.dBClusterParameterGroupStatus` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.dBClusterMembers.dBInstanceIdentifier`	`target.resource.attribute.labels[res_db_cluster_members_db_instance_identifier]`	Iterate through log field `Records.responseElements.dBClusterMembers`, then the `target.resource.attribute.labels.key` UDM field is set to `res_db_cluster_members_db_instance_identifier` and `Records.responseElements.dBClusterMembers.dBInstanceIdentifier` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.dBClusterMembers.isClusterWriter`	`target.resource.attribute.labels[res_db_cluster_members_is_cluste_writer]`	Iterate through log field `Records.responseElements.dBClusterMembers`, then the `target.resource.attribute.labels.key` UDM field is set to `res_db_cluster_members_is_cluste_writer` and `Records.responseElements.dBClusterMembers.isClusterWriter` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.dBClusterMembers.promotionTier`	`target.resource.attribute.labels[res_db_cluster_members_db_promotion_tier]`	Iterate through log field `Records.responseElements.dBClusterMembers`, then the `target.resource.attribute.labels.key` UDM field is set to `res_db_cluster_members_db_promotion_tier` and `Records.responseElements.dBClusterMembers.promotionTier` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.dBClusterParameterGroup`	`target.resource.attribute.labels[res_db_cluster_parameter_group]`
`Records.responseElements.dBClusterSnapshotArn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `CopyDBClusterSnapshot` then, the `target.resource.attribute.labels.key` UDM field is set to `db_cluster_snapshot_arn` and `Records.responseElements.dBClusterSnapshotArn` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteDBClusterSnapshot` then, `Records.responseElements.dBClusterSnapshotArn` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.dBClusterSnapshotAttributes.attributeName`	`target.resource.attribute.labels[res_db_cluster_snapshot_attributes_attribute_name]`	Iterate through log field `Records.responseElements.dBClusterSnapshotAttributes`, then the `target.resource.attribute.labels.key` UDM field is set to `res_db_cluster_snapshot_attributes_attribute_name` and `Records.responseElements.dBClusterSnapshotAttributes.attributeName` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Iterate through log field `Records.responseElements.dBClusterSnapshotAttributes`, then Iterate through log field `Records.responseElements.dBClusterSnapshotAttributes.attributeValues`, then the `target.resource.attribute.labels.key` UDM field is set to `res_db_cluster_snapshot_attributes_attribute_value` and `Records.responseElements.dBClusterSnapshotAttributes.attributeValues` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.dBClusterSnapshotAttributes.attributeValues`	`target.resource.attribute.labels[res_db_cluster_snapshot_attributes_attribute_name]`	Iterate through log field `Records.responseElements.dBClusterSnapshotAttributes`, then the `target.resource.attribute.labels.key` UDM field is set to `res_db_cluster_snapshot_attributes_attribute_name` and `Records.responseElements.dBClusterSnapshotAttributes.attributeName` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Iterate through log field `Records.responseElements.dBClusterSnapshotAttributes`, then Iterate through log field `Records.responseElements.dBClusterSnapshotAttributes.attributeValues`, then the `target.resource.attribute.labels.key` UDM field is set to `res_db_cluster_snapshot_attributes_attribute_value` and `Records.responseElements.dBClusterSnapshotAttributes.attributeValues` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.dBClusterSnapshotIdentifier`	`target.resource.product_object_id`	If the `Records.eventName` log field value contain one of the following values `DescribeDBClusterSnapshotAttributes` `ModifyDBClusterSnapshotAttribute` `CreateDBClusterSnapshot` `DeleteDBClusterSnapshot` `DescribeDBClusterSnapshots` and if the `Records.responseElements.dBClusterSnapshotIdentifier` log field value is not empty then, `Records.responseElements.dBClusterSnapshotIdentifier` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SNAPSHOT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.dBClusterSnapshotIdentifier` log field value is not empty then, `Records.requestParameters.dBClusterSnapshotIdentifier` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SNAPSHOT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `db_cluster_snapshot_identifier` and `Records.responseElements.dBClusterSnapshotIdentifier` log field is mapped to the `target.resource.attribute.labels.value` UDM field and the `target.resource.attribute.labels.key` UDM field is set to `db_cluster_snapshot_identifier` and `Records.requestParameters.dBClusterSnapshotIdentifier` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.dBClusterSnapshotIdentifier`	`target.resource.product_object_id`	If the `Records.eventName` log field value contain one of the following values `DescribeDBClusterSnapshotAttributes` `ModifyDBClusterSnapshotAttribute` `CreateDBClusterSnapshot` `DeleteDBClusterSnapshot` `DescribeDBClusterSnapshots` and if the `Records.responseElements.dBClusterSnapshotIdentifier` log field value is not empty then, `Records.responseElements.dBClusterSnapshotIdentifier` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SNAPSHOT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.dBClusterSnapshotIdentifier` log field value is not empty then, `Records.requestParameters.dBClusterSnapshotIdentifier` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `SNAPSHOT` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `db_cluster_snapshot_identifier` and `Records.responseElements.dBClusterSnapshotIdentifier` log field is mapped to the `target.resource.attribute.labels.value` UDM field and the `target.resource.attribute.labels.key` UDM field is set to `db_cluster_snapshot_identifier` and `Records.requestParameters.dBClusterSnapshotIdentifier` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.dBInstanceArn`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateDBInstance` `DeleteDBInstance` `ModifyDBInstance` `RebootDBInstance` `RestoreDBInstanceFromDBSnapshot` then, `Records.responseElements.dBInstanceArn` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.dBInstanceClass`	`target.resource.attribute.labels[res_db_instance_class]`
`Records.responseElements.dBInstanceIdentifier`	`target.resource.product_object_id`	If the `Records.eventName` log field value contain one of the following values `CreateDBInstance` `DeleteDBInstance` `ModifyDBInstance` `RebootDBInstance` `RestoreDBInstanceFromDBSnapshot` `StopDBInstance` then, `Records.responseElements.dBInstanceIdentifier` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateDBSnapshot` `DeleteDBSnapshot` `CopyDBSnapshot` then, `Records.responseElements.dBInstanceIdentifier` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeDBInstances` `DescribeDBLogFiles` `DescribeTenantDatabases` `DescribeValidDBInstanceModifications` `DownloadDBLogFilePortion` then, `Records.requestParameters.dBInstanceIdentifier` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeDBSnapshots` then, `Records.requestParameters.dBInstanceIdentifier` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.requestParameters.dBInstanceIdentifier`	`target.resource.product_object_id`	If the `Records.eventName` log field value contain one of the following values `CreateDBInstance` `DeleteDBInstance` `ModifyDBInstance` `RebootDBInstance` `RestoreDBInstanceFromDBSnapshot` `StopDBInstance` then, `Records.responseElements.dBInstanceIdentifier` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateDBSnapshot` `DeleteDBSnapshot` `CopyDBSnapshot` then, `Records.responseElements.dBInstanceIdentifier` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeDBInstances` `DescribeDBLogFiles` `DescribeTenantDatabases` `DescribeValidDBInstanceModifications` `DownloadDBLogFilePortion` then, `Records.requestParameters.dBInstanceIdentifier` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeDBSnapshots` then, `Records.requestParameters.dBInstanceIdentifier` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
	`target.resource.resource_type`	If the `Records.responseElements.dBInstanceIdentifier` log field value is not empty and the `Records.eventName` log field value contain one of the following values `CreateDBInstance` `DeleteDBInstance` `DescribeTenantDatabases` `ModifyDBInstance` `RebootDBInstance` `RestoreDBInstanceFromDBSnapshot` `StopDBInstance` then, the `target.resource.resource_type` UDM field is set to `DATABASE`. Else, if the `Records.responseElements.dBSnapshotArn` log field value is not empty and the `Records.eventName` log field value contain one of the following values `CreateDBSnapshot` `DeleteDBSnapshot` `CopyDBSnapshot` then, the `target.resource.resource_type` UDM field is set to `DATABASE`. Else, if the `Records.responseElements.dBParameterGroupArn` log field value is not empty and the `Records.eventName` log field value is equal to `CreateDBParameterGroup` or the `Records.responseElements.dBSubnetGroupArn` log field value is not empty and the `Records.eventName` log field value is equal to `CreateDBSubnetGroup)` then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.requestParameters.dBInstanceIdentifier` log field value is not empty and the `Records.eventName` log field value contain one of the following values `DescribeDBInstances` `DescribeDBLogFiles` `DescribeValidDBInstanceModifications` `DescribeTenantDatabases` `DownloadDBLogFilePortion` then, the `target.resource.resource_type` UDM field is set to `DATABASE`. Else, if the `Records.requestParameters.exportTaskIdentifier` log field value is not empty and the `Records.eventName` log field value contain one of the following values `DescribeExportTasks` `StartExportTask` then, the `target.resource.resource_type` UDM field is set to `TASK`.
	`target.resource.attribute.cloud.environment`	If the `Records.responseElements.dBInstanceIdentifier` log field value is not empty and the `Records.eventName` log field value contain one of the following values `CreateDBInstance` `DeleteDBInstance` `DescribeTenantDatabases` `ModifyDBInstance` `RebootDBInstance` `RestoreDBInstanceFromDBSnapshot` `StopDBInstance` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.dBSnapshotArn` log field value is not empty and the `Records.eventName` log field value contain one of the following values `CreateDBSnapshot` `DeleteDBSnapshot` `CopyDBSnapshot` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.responseElements.dBParameterGroupArn` log field value is not empty and the `Records.eventName` log field value is equal to `CreateDBParameterGroup` or the `Records.responseElements.dBSubnetGroupArn` log field value is not empty and the `Records.eventName` log field value is equal to `CreateDBSubnetGroup)` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.dBInstanceIdentifier` log field value is not empty and the `Records.eventName` log field value contain one of the following values `DescribeDBInstances` `DescribeDBLogFiles` `DescribeValidDBInstanceModifications` `DescribeTenantDatabases` `DownloadDBLogFilePortion` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.requestParameters.dBSnapshotIdentifier` log field value is not empty and the `Records.eventName` log field value is equal to `DescribeDBSnapshots` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and the `target.resource.resource_type` UDM field is set to `SNAPSHOT`. Else, if the `Records.requestParameters.exportTaskIdentifier` log field value is not empty and the `Records.eventName` log field value contain one of the following values `DescribeExportTasks` `StartExportTask` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.dBInstanceStatus`	`target.resource.attribute.labels[res_db_instance_status]`
`Records.responseElements.dBName`	`target.resource.attribute.labels[res_db_name]`
`Records.responseElements.dBParameterGroupArn`	`target.resource.name`	If the `Records.responseElements.dBParameterGroupArn` log field value is not empty and the `Records.eventName` log field value is equal to `CreateDBParameterGroup` then, `Records.responseElements.dBParameterGroupArn` log field is mapped to the `target.resource.name` UDM field.
`Records.requestParameters.dBParameterGroupFamily`	`target.resource.attribute.labels[req_db_parameter_group_family]`
`Records.responseElements.dBParameterGroupFamily`	`target.resource.attribute.labels[res_db_parameter_group_family]`
`Records.responseElements.dBParameterGroupName`	`target.resource.attribute.labels[res_db_parameter_group_name]`
`Records.requestParameters.dBParameterGroupName`	`target.resource.attribute.labels[res_db_parameter_group_name]`
`Records.requestParameters.dBParameterGroupName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `DeleteDBParameterGroup` and the `Records.responseElements.dBParameterGroupName` log field value is not empty then, `Records.responseElements.dBParameterGroupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteDBParameterGroup` and the `Records.requestParameters.dBParameterGroupName` log field value is not empty then, `Records.requestParameters.dBParameterGroupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeDBParameterGroups` `DescribeDBParameters` and the `Records.responseElements.dBParameterGroupName` log field value is not empty then, `Records.responseElements.dBParameterGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeDBParameterGroups` `DescribeDBParameters` and the `Records.requestParameters.dBParameterGroupName` log field value is not empty then, `Records.requestParameters.dBParameterGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.dBParameterGroupName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `DeleteDBParameterGroup` and the `Records.responseElements.dBParameterGroupName` log field value is not empty then, `Records.responseElements.dBParameterGroupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteDBParameterGroup` and the `Records.requestParameters.dBParameterGroupName` log field value is not empty then, `Records.requestParameters.dBParameterGroupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeDBParameterGroups` `DescribeDBParameters` and the `Records.responseElements.dBParameterGroupName` log field value is not empty then, `Records.responseElements.dBParameterGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeDBParameterGroups` `DescribeDBParameters` and the `Records.requestParameters.dBParameterGroupName` log field value is not empty then, `Records.requestParameters.dBParameterGroupName` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.dBParameterGroups.dBParameterGroupName`	`target.resource.attribute.labels[res_db_parameter_groups_dbparameter_group_name]`	Iterate through log field `Records.responseElements.dBParameterGroups`, then the `target.resource.attribute.labels.key` UDM field is set to `res_db_parameter_groups_dbparameter_group_name` and `Records.responseElements.dBParameterGroups.dBParameterGroupName` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.dBParameterGroups.parameterApplyStatus`	`target.resource.attribute.labels[res_dbparameter_groups_parameter_apply_status]`	Iterate through log field `Records.responseElements.dBParameterGroups`, then the `target.resource.attribute.labels.key` UDM field is set to `res_dbparameter_groups_parameter_apply_status` and `Records.responseElements.dBParameterGroups.parameterApplyStatus` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.dBSnapshotArn`	`target.resource.name`	If the `Records.eventName` log field value contain one of the following values `CreateDBSnapshot` `DeleteDBSnapshot` then, `Records.responseElements.dBSnapshotArn` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.dBSnapshotIdentifier`	`target.resource.product_object_id`	If the `Records.eventName` log field value contain one of the following values `CreateDBSnapshot` `DeleteDBSnapshot` `DescribeDBSnapshots` and if the `Records.responseElements.dBSnapshotIdentifier` log field value is not empty then, `Records.responseElements.dBSnapshotIdentifier` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.requestParameters.dBSnapshotIdentifier` log field value is not empty then, `Records.requestParameters.dBSnapshotIdentifier` log field is mapped to the `target.resource.product_object_id` UDM field. Else, the `src.resource.attribute.labels.key` UDM field is set to `db_snapshot_identifier` and `Records.responseElements.dBSnapshotIdentifier` log field is mapped to the `src.resource.attribute.labels.value` UDM field.
`Records.requestParameters.dBSnapshotIdentifier`	`target.resource.product_object_id`	If the `Records.eventName` log field value contain one of the following values `CreateDBSnapshot` `DeleteDBSnapshot` `DescribeDBSnapshots` and if the `Records.responseElements.dBSnapshotIdentifier` log field value is not empty then, `Records.responseElements.dBSnapshotIdentifier` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.requestParameters.dBSnapshotIdentifier` log field value is not empty then, `Records.requestParameters.dBSnapshotIdentifier` log field is mapped to the `target.resource.product_object_id` UDM field. Else, the `src.resource.attribute.labels.key` UDM field is set to `db_snapshot_identifier` and `Records.responseElements.dBSnapshotIdentifier` log field is mapped to the `src.resource.attribute.labels.value` UDM field.
`Records.responseElements.dBSubnetGroup.dBSubnetGroupDescription`	`target.resource.attribute.labels[res_db_subnet_group_db_subnet_group_description]`
`Records.responseElements.dBSubnetGroup.dBSubnetGroupName`	`target.resource.attribute.labels[res_db_subnet_group_db_subnet_group_name]`
`Records.responseElements.dBSubnetGroup.subnetGroupStatus`	`target.resource.attribute.labels[res_db_subnet_group_subnet_group_status]`
`Records.responseElements.dBSubnetGroup.subnets.subnetAvailabilityZone.name`	`target.resource_ancestors.attribute.labels[res_db_subnet_group_subnets_subnet_availability_zone_name]`	Iterate through log field `Records.responseElements.dBSubnetGroup.subnets`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `res_db_subnet_group_subnets_subnet_availability_zone_name` and `Records.responseElements.dBSubnetGroup.subnets.subnetAvailabilityZone.name` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.responseElements.dBSubnetGroup.subnets.subnetIdentifier`	`target.resource_ancestors.product_object_id`	Iterate through log field `Records.responseElements.dBSubnetGroup.subnets`, then `Records.responseElements.dBSubnetGroup.subnets.subnetIdentifier` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
	`target.resource_ancestors.resource_type`	Iterate through log field `Records.responseElements.dBSubnetGroup.subnets`, then If the `Records.responseElements.dBSubnetGroup.subnets.subnetIdentifier` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `SUBNET`. Iterate through log field `Records.responseElements.subnets`, then If the `Records.responseElements.subnets.subnetIdentifier` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `SUBNET`. If the `Records.eventName` log field value contain one of the following values `CreateDBSnapshot` `DeleteDBSnapshot` `CopyDBSnapshot` and the `Records.responseElements.dBInstanceIdentifier` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `DATABASE`. Else, if the `Records.eventName` log field value is equal to `DescribeDBSnapshots` and the `Records.requestParameters.dBInstanceIdentifier` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `DATABASE`. Else, if the `Records.requestParameters.sourceArn` log field value is not empty and the `Records.eventName` log field value is equal to `DescribeExportTasks` and if the `Records.requestParameters.sourceType` log field value is equal to `SNAPSHOT` then, the `target.resource_ancestors.resource_type` UDM field is set to `SNAPSHOT`. Else, if the `Records.requestParameters.sourceType` log field value is equal to `CLUSTER` then, the `target.resource_ancestors.resource_type` UDM field is set to `CLUSTER`.
	`target.resource_ancestors.attribute.cloud.environment`	Iterate through log field `Records.responseElements.dBSubnetGroup.subnets`, then If the `Records.responseElements.dBSubnetGroup.subnets.subnetIdentifier` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Iterate through log field `Records.responseElements.subnets`, then If the `Records.responseElements.subnets.subnetIdentifier` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. If the `Records.eventName` log field value contain one of the following values `CreateDBSnapshot` `DeleteDBSnapshot` `CopyDBSnapshot` and the `Records.responseElements.dBInstanceIdentifier` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeDBSnapshots` and the `Records.requestParameters.dBInstanceIdentifier` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeExportTasks` and the `Records.requestParameters.sourceArn` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.dBSubnetGroup.subnets.subnetStatus`	`target.resource_ancestors.attribute.labels[res_db_subnet_group_subnets_subnet_status]`	Iterate through log field `Records.responseElements.dBSubnetGroup.subnets`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `res_db_subnet_group_subnets_subnet_status` and `Records.responseElements.dBSubnetGroup.subnets.subnetStatus` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.responseElements.dBSubnetGroup.vpcId`	`target.resource.attribute.labels[res_db_subnet_group_vpcId]`
`Records.responseElements.dBSubnetGroupArn`	`target.resource.name`	If the `Records.responseElements.dBSubnetGroupArn` log field value is not empty and the `Records.eventName` log field value is equal to `CreateDBSubnetGroup` then, `Records.responseElements.dBSubnetGroupArn` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.dBSubnetGroupDescription`	`target.resource.attribute.labels[res_db_subnet_group_description]`
`Records.requestParameters.dBSubnetGroupDescription`	`target.resource.attribute.labels[res_db_subnet_group_description]`
`Records.responseElements.dBSubnetGroupName`	`target.resource.attribute.labels[res_db_subnet_group_name]`	If the `Records.eventName` log field value is equal to `DeleteDBSubnetGroup` and if the `Records.responseElements.dBSubnetGroupArn` log field value is empty then, `Records.responseElements.dBSubnetGroupName` log field is mapped to the `target.resource.name` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `res_db_subnet_group_name` and `Records.responseElements.dBSubnetGroupName` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.dBSubnetGroupName`	`target.resource.attribute.labels[req_db_subnet_group_name]`
`Records.responseElements.databaseName`	`target.resource.attribute.labels[res_database_name]`
`Records.responseElements.dbClusterResourceId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `CreateDBClusterSnapshot` then, the `target.resource.attribute.labels.key` UDM field is set to `res_db_cluster_resource_id` and `Records.responseElements.dbClusterResourceId` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateDBCluster` `DeleteDBCluster` `FailoverDBCluster` `ModifyDBCluster` then, `Records.responseElements.dbClusterResourceId` log field is mapped to the `target.resource.product_object_id` UDM field.
`Records.responseElements.dbiResourceId`	`src.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `CopyDBSnapshot` then, `Records.responseElements.dbiResourceId` log field is mapped to the `src.resource_ancestors.product_object_id` UDM field. If the `Records.responseElements.dbiResourceId` log field value is not empty then, the `src.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and the `src.resource_ancestors.resource_type` UDM field is set to `DATABASE`. Else, if the `Records.eventName` log field value contain one of the following values `CreateDBInstance` `DeleteDBInstance` then, the `target.resource.attribute.labels.key` UDM field is set to `res_dbi_resource_id` and `Records.responseElements.dbiResourceId` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateDBSnapshot` `DeleteDBSnapshot` then, the `target.resource_ancestors.attribute.labels.key` UDM field is set to `res_dbi_resource_id` and `Records.responseElements.dbiResourceId` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.responseElements.dedicatedLogVolume`	`target.resource.attribute.labels[res_dedicated_log_volume]`
`Records.responseElements.deletionProtection`	`target.resource.attribute.labels[res_deletion_protection]`
`Records.responseElements.description`	`target.resource.attribute.labels[res_description]`
`Records.requestParameters.description`	`target.resource.attribute.labels[res_description]`
`Records.responseElements.earliestRestorableTime`	`target.resource.attribute.labels[res_earliest_restorable_time]`
`Records.responseElements.enabledCloudwatchLogsExports`	`target.resource.attribute.labels[res_enabled_cloudwatch_logs_exports]`	Iterate through log field `Records.responseElements.enabledCloudwatchLogsExports`, then the `target.resource.attribute.labels.key` UDM field is set to `res_enabled_cloudwatch_logs_exports` and `Records.responseElements.enabledCloudwatchLogsExports` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.encrypted`	`target.resource.attribute.labels[res_encrypted]`
`Records.responseElements.endpoint`	`target.url`
`Records.responseElements.endpoint.address`	`target.resource.attribute.labels[res_endpoint_address]`
`Records.responseElements.endpoint.hostedZoneId`	`target.resource.attribute.labels[res_endpoint_hosted_zoneId]`
`Records.responseElements.endpoint.port`	`target.resource.attribute.labels[res_endpoint_port]`
`Records.responseElements.engine`	`target.resource.attribute.labels[res_engine]`
`Records.responseElements.engineMode`	`target.resource.attribute.labels[res_engine_mode]`
`Records.responseElements.engineVersion`	`target.resource.attribute.labels[res_engine_version]`
`Records.responseElements.enhancedMonitoringResourceArn`	`target.resource.attribute.labels[res_enhanced_monitoring_resource_arn]`
`Records.responseElements.exportTaskIdentifier`	`target.resource.product_object_id`
`Records.responseElements.format`	`target.resource.attribute.labels[res_format]`
`Records.responseElements.hostedZoneId`	`target.resource.attribute.labels[res_hosted_zone_id]`
`Records.responseElements.httpEndpointEnabled`	`target.resource.attribute.labels[res_http_endpoint_enabled]`
`Records.responseElements.iAMDatabaseAuthenticationEnabled`	`target.resource.attribute.labels[res_iAMDatabaseAuthenticationEnabled]`
`Records.responseElements.iamRoleArn`	`target.resource.attribute.labels[res_iam_role_arn]`
`Records.responseElements.instanceCreateTime`	`src.resource_ancestors.attribute.creation_time`	If the `Records.eventName` log field value is equal to `CopyDBSnapshot` then, `Records.responseElements.instanceCreateTime` log field is mapped to the `src.resource_ancestors.attribute.creation_time` UDM field. If the `Records.eventName` log field value contain one of the following values `CreateDBSnapshot` `DeleteDBSnapshot` then, `Records.responseElements.instanceCreateTime` log field is mapped to the `target.resource_ancestors.attribute.creation_time` UDM field. If the `Records.eventName` log field value contain one of the following values `DeleteDBInstance` `CreateDBInstance` then, `Records.responseElements.instanceCreateTime` log field is mapped to the `target.resource.attribute.creation_time` UDM field.
`Records.responseElements.iops`	`target.resource.attribute.labels[res_iops]`
`Records.responseElements.kmsKeyId`	`target.resource.attribute.labels[res_kms_key_id]`
`Records.responseElements.latestRestorableTime`	`target.resource.attribute.labels[res_latest_restorable_time]`
`Records.responseElements.licenseModel`	`target.resource.attribute.labels[res_license_model]`
`Records.responseElements.masterUsername`	`target.resource.attribute.labels[res_master_username]`
`Records.responseElements.maxAllocatedStorage`	`target.resource.attribute.labels[res_max_allocated_storage]`
`Records.responseElements.monitoringInterval`	`target.resource.attribute.labels[res_monitoring_interval]`
`Records.responseElements.monitoringRoleArn`	`target.resource.attribute.labels[res_monitoring_role_arn]`
`Records.responseElements.multiAZ`	`target.resource.attribute.labels[res_multi_az]`
`Records.responseElements.networkType`	`target.resource.attribute.labels[res_network_type]`
`Records.responseElements.optionGroupMemberships.optionGroupName`	`target.resource.attribute.labels[res_option_group_memberships_option_group_name]`	Iterate through log field `Records.responseElements.optionGroupMemberships`, then the `target.resource.attribute.labels.key` UDM field is set to `res_option_group_memberships_option_group_name` and `Records.responseElements.optionGroupMemberships.optionGroupName` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.optionGroupMemberships.status`	`target.resource.attribute.labels[res_option_group_memberships_status]`	Iterate through log field `Records.responseElements.optionGroupMemberships`, then the `target.resource.attribute.labels.key` UDM field is set to `res_option_group_memberships_status` and `Records.responseElements.optionGroupMemberships.status` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.optionGroupName`	`target.resource.attribute.labels[res_option_group_name]`
`Records.responseElements.originalSnapshotCreateTime`	`target.resource.attribute.creation_time`
`Records.responseElements.pendingMaintenanceActionDetails.action`	`target.resource.attribute.labels[res_pending_maintenance_action_details_action]`	Iterate through log field `Records.responseElements.pendingMaintenanceActionDetails`, then the `target.resource.attribute.labels.key` UDM field is set to `res_pending_maintenance_action_details_action` and `Records.responseElements.pendingMaintenanceActionDetails.action` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.pendingMaintenanceActionDetails.currentApplyDate`	`target.resource.attribute.last_update_time`	Iterate through log field `Records.responseElements.pendingMaintenanceActionDetails`, then If the `index` value is equal to `0` then, `Records.responseElements.pendingMaintenanceActionDetails.currentApplyDate` log field is mapped to the `target.resource.attribute.last_update_time` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `res_pending_maintenance_action_details_current_apply_date` and `Records.responseElements.pendingMaintenanceActionDetails.currentApplyDate` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.pendingMaintenanceActionDetails.description`	`security_result.action_details`	Iterate through log field `Records.responseElements.pendingMaintenanceActionDetails`, then If the `Records.responseElements.pendingMaintenanceActionDetails.description` log field value is not empty and the `Records.responseElements.pendingMaintenanceActionDetails.action` log field value is not empty then, `%{Records.responseElements.pendingMaintenanceActionDetails.action}-%{Records.responseElements.pendingMaintenanceActionDetails.description}` log field is mapped to the `security_result.action_details` UDM field.
`Records.responseElements.pendingMaintenanceActionDetails.action`	`security_result.action_details`	Iterate through log field `Records.responseElements.pendingMaintenanceActionDetails`, then If the `Records.responseElements.pendingMaintenanceActionDetails.description` log field value is not empty and the `Records.responseElements.pendingMaintenanceActionDetails.action` log field value is not empty then, `%{Records.responseElements.pendingMaintenanceActionDetails.action}-%{Records.responseElements.pendingMaintenanceActionDetails.description}` log field is mapped to the `security_result.action_details` UDM field.
`Records.responseElements.pendingMaintenanceActionDetails.optInStatus`	`target.resource.attribute.labels[res_pending_maintenance_action_details_opt_in_status]`	Iterate through log field `Records.responseElements.pendingMaintenanceActionDetails`, then the `target.resource.attribute.labels.key` UDM field is set to `res_pending_maintenance_action_details_opt_in_status` and `Records.responseElements.pendingMaintenanceActionDetails.optInStatus` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.pendingModifiedValues.cACertificateIdentifier`	`target.resource.attribute.labels[res_pending_modified_values_ca_certificate_identifier]`
`Records.responseElements.pendingModifiedValues.dBInstanceClass`	`target.resource.attribute.labels[res_pending_modified_values_db_instance_class]`
`Records.responseElements.pendingModifiedValues.engineVersion`	`target.resource.attribute.labels[res_pending_modified_values_engine_version]`
`Records.responseElements.pendingModifiedValues.masterUserPassword`	`target.resource.attribute.labels[res_pending_modified_values_master_user_password]`
`Records.responseElements.pendingModifiedValues.pendingCloudwatchLogsExports.logTypesToEnable`	`target.resource.attribute.labels[res_pending_modified_values_pending_cloudwatch_logs_exports_log_types_to_enable]`	Iterate through log field `Records.responseElements.pendingModifiedValues.pendingCloudwatchLogsExports.logTypesToEnable`, then the `target.resource.attribute.labels.key` UDM field is set to `res_pending_modified_values_pending_cloudwatch_logs_exports_log_types_to_enable` and `Records.responseElements.pendingModifiedValues.pendingCloudwatchLogsExports.logTypesToEnable` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.percentProgress`	`target.resource.attribute.labels[res_percent_progress]`
`Records.responseElements.performanceInsightsEnabled`	`target.resource.attribute.labels[res_performance_insights_enabled]`
`Records.responseElements.performanceInsightsKMSKeyId`	`target.resource.attribute.labels[res_performance_insights_kms_key_id]`
`Records.responseElements.performanceInsightsRetentionPeriod`	`target.resource.attribute.labels[res_performance_insights_retention_period]`
`Records.responseElements.preferredBackupWindow`	`target.resource.attribute.labels[res_preferred_backup_window]`
`Records.responseElements.preferredMaintenanceWindow`	`target.resource.attribute.labels[res_preferred_maintenance_window]`
`Records.responseElements.promotionTier`	`target.resource.attribute.labels[res_preferred_maintenance_window]`
`Records.responseElements.publiclyAccessible`	`target.resource.attribute.labels[res_promotion_tier]`
`Records.responseElements.readerEndpoint`	`target.resource.attribute.labels[res_reader_endpoint]`
`Records.responseElements.resourceIdentifier`	`target.resource.name`	`Records.responseElements.resourceIdentifier` log field is mapped to the `target.resource.name` UDM field. If the `Records.responseElements.resourceIdentifier` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `DATABASE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.resourceIdentifier`	`target.resource.name`	`Records.responseElements.resourceIdentifier` log field is mapped to the `target.resource.name` UDM field. If the `Records.responseElements.resourceIdentifier` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `DATABASE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.s3Bucket`	`target.resource.attribute.labels[res_s3_bucket_name]`
`Records.responseElements.s3Prefix`	`target.resource.attribute.labels[res_s3_prefix]`
`Records.responseElements.secondaryAvailabilityZone`	`target.resource.attribute.labels[res_secondary_availability_zone]`
`Records.responseElements.snapshotCreateTime`	`target.resource.attribute.creation_time`	If the `Records.eventName` log field value is equal to `CopyDBClusterSnapshot` and the `Records.responseElements.originalSnapshotCreateTime` log field value is not empty then, `Records.responseElements.originalSnapshotCreateTime` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyDBClusterSnapshot` and the `Records.responseElements.snapshotCreateTime` log field value is not empty then, `Records.responseElements.snapshotCreateTime` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteDBClusterSnapshot` and the `Records.responseElements.originalSnapshotCreateTime` log field value is not empty then, `Records.responseElements.originalSnapshotCreateTime` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteDBClusterSnapshot` and the `Records.responseElements.snapshotCreateTime` log field value is not empty then, `Records.responseElements.snapshotCreateTime` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `snapshot_create_time` and `Records.responseElements.snapshotCreateTime` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.originalSnapshotCreateTime`	`target.resource.attribute.creation_time`	If the `Records.eventName` log field value is equal to `CopyDBClusterSnapshot` and the `Records.responseElements.originalSnapshotCreateTime` log field value is not empty then, `Records.responseElements.originalSnapshotCreateTime` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyDBClusterSnapshot` and the `Records.responseElements.snapshotCreateTime` log field value is not empty then, `Records.responseElements.snapshotCreateTime` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteDBClusterSnapshot` and the `Records.responseElements.originalSnapshotCreateTime` log field value is not empty then, `Records.responseElements.originalSnapshotCreateTime` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteDBClusterSnapshot` and the `Records.responseElements.snapshotCreateTime` log field value is not empty then, `Records.responseElements.snapshotCreateTime` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `snapshot_create_time` and `Records.responseElements.snapshotCreateTime` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.snapshotTarget`	`target.resource.attribute.labels[res_snapshot_target]`
`Records.responseElements.snapshotTime`	`target.resource.attribute.creation_time`
`Records.responseElements.snapshotType`	`target.resource.attribute.labels[res_snapshot_type]`
`Records.responseElements.sourceArn`	`src.resource.name`
`Records.responseElements.sourceDBClusterSnapshotArn`	`src.resource.name`	If the `Records.eventName` log field value is equal to `CopyDBClusterSnapshot` then, `Records.responseElements.sourceDBClusterSnapshotArn` log field is mapped to the `src.resource.name` UDM field.
`Records.responseElements.sourceDBSnapshotIdentifier`	`src.resource.product_object_id`
`Records.responseElements.sourceRegion`	`src.resource.attribute.cloud.availability_zone`
`Records.responseElements.sourceType`	`target.resource.attribute.labels[res_source_type]`
`Records.responseElements.status`	`target.resource.attribute.labels[res_status]`
`Records.responseElements.storageEncrypted`	`target.resource.attribute.labels[res_storage_encrypted]`
`Records.responseElements.storageThroughput`	`target.resource.attribute.labels[res_storage_throughput]`
`Records.responseElements.storageType`	`target.resource.attribute.labels[res_storage_type]`
`Records.responseElements.subnetGroupStatus`	`target.resource.attribute.labels[subnet_group_status]`
`Records.responseElements.subnets.subnetAvailabilityZone.name`	`target.resource_ancestors.attribute.labels[res_subnets_subnet_availability_zone_name]`	Iterate through log field `Records.responseElements.subnets`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `res_subnets_subnet_availability_zone_name` and `Records.responseElements.subnets.subnetAvailabilityZone.name` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.responseElements.subnets.subnetIdentifier`	`target.resource_ancestors.product_object_id`	Iterate through log field `Records.responseElements.subnets`, then `Records.responseElements.subnets.subnetIdentifier` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.requestParameters.subnetIds`	`target.resource_ancestors.product_object_id`	Iterate through log field `Records.responseElements.subnets`, then `Records.responseElements.subnets.subnetIdentifier` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.subnets.subnetStatus`	`target.resource_ancestors.attribute.labels[res_subnets_subnet_status]`	Iterate through log field `Records.responseElements.subnets`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `res_subnets_subnet_status` and `Records.responseElements.subnets.subnetStatus` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.responseElements.supportedNetworkTypes`	`target.resource_ancestors.attribute.labels[res_supported_network_types]`	Iterate through log field `Records.responseElements.supportedNetworkTypes`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `res_supported_network_types` and `Records.responseElements.supportedNetworkTypes` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.responseElements.tagList.key`	`target.resource.attribute.labels`	Iterate through log field `Records.requestParameters.tagList`, then `Records.responseElements.tagList.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.tagList.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.tagList.value`	`target.resource.attribute.labels`	Iterate through log field `Records.requestParameters.tagList`, then `Records.responseElements.tagList.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.tagList.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.totalExtractedDataInGB`	`target.resource.attribute.labels[res_total_extracted_data_in_gb]`
`Records.responseElements.vpcId`	`target.resource.attribute.labels[res_vpc_id]`
`Records.requestParameters.dBInstanceIdentifier`	`target.resource.product_object_id`	If the `Records.requestParameters.dBInstanceIdentifier` log field value is not empty and the `Records.responseElements.dBInstanceIdentifier` log field value is empty and if the `Records.eventName` log field value is equal to `StopDBInstance` then, `Records.requestParameters.dBInstanceIdentifier` log field is mapped to the `target.resource.product_object_id` UDM field and the `target.resource.resource_type` UDM field is set to `DATABASE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.vpcSecurityGroups.status`	`target.resource.attribute.labels`	Iterate through log field `Records.responseElements.vpcSecurityGroups`, then the `target.resource.attribute.labels.key` UDM field is set to `res_vpc_security_groups_status` and `Records.responseElements.vpcSecurityGroups.status` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpcSecurityGroups.vpcSecurityGroupId`	`target.resource.attribute.labels`	Iterate through log field `Records.responseElements.vpcSecurityGroups`, then the `target.resource.attribute.labels.key` UDM field is set to `res_vpc_security_groups_vpc_security_group_id` and `Records.responseElements.vpcSecurityGroups.vpcSecurityGroupId` log field is mapped to the `target.resource.attribute.labels.value` UDM field.

Field mapping reference: AWS CloudTrail - EC2

The following table lists the log fields for the EC2 log type and their corresponding UDM fields.

Log field	UDM mapping	Logic
`Records.requestParameters.vpcPeeringConnectionId`	`target.resource.attribute.labels[records_request_parameters_vpc_peering_connection_id]`
`Records.responseElements.vpcPeeringConnection.vpcPeeringConnectionId`	`target.resource.attribute.labels[records_response_elements_vpc_peering_connection_vpc_peering_connection_id]`
`Records.responseElements.requestId`	`additional.fields[request_id]`
`Records.responseElements.vpcPeeringConnection.requesterVpcInfo.vpcId`	`principal.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.vpcId` log field is mapped to the `principal.resource_ancestors.product_object_id` UDM field.
	`principal.resource_ancestors.resource_type`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.vpcId` log field value is not empty then, the `principal.resource_ancestors.resource_type` UDM field is set to `VPC_NETWORK`.
	`principal.resource_ancestors.attribute.cloud.environment`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.vpcId` log field value is not empty then, the `principal.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.vpcPeeringConnection.requesterVpcInfo.cidrBlock`	`principal.resource.attribute.labels[records_response_elements_vpc_peering_connection_requester_vpc_info_cidr_block]`
`Records.responseElements.vpcPeeringConnection.requesterVpcInfo.cidrBlockSet.items.cidrBlock`	`target.resource.attribute.labels[records_response_elements_vpc_peering_connection_requester_vpc_info_cidr_block_set_items_cidr_block]`	Iterate through log field `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.cidrBlockSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpc_peering_connection_requester_vpc_info_cidr_block_set_items_cidr_block` and `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.cidrBlockSet.items.cidrBlock` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId`	`principal.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `principal.resource_ancestors.product_object_id` UDM field.
	`principal.resource_ancestors.resource_type`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field value is not empty then, the `principal.resource_ancestors.resource_type` UDM field is set to `SERVICE_ACCOUNT`.
	`principal.resource_ancestors.attribute.cloud.environment`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field value is not empty then, the `principal.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.vpcPeeringConnection.requesterVpcInfo.region`	`principal.location.name`
`Records.responseElements.vpcPeeringConnection.accepterVpcInfo.peeringOptions.allowEgressFromLocalVpcToRemoteClassicLink`	`principal.resource.attribute.labels[records_response_elements_vpc_peering_connection_accepter_vpc_info_peering_options_allow_egress_from_local_vpc_to_remote_classic_link]`
`Records.responseElements.vpcPeeringConnection.accepterVpcInfo.peeringOptions.allowDnsResolutionFromRemoteVpc`	`principal.resource.attribute.labels[records_response_elements_vpc_peering_connection_accepter_vpc_info_peering_options_allow_dns_resolution_from_remote_vpc]`
`Records.responseElements.vpcPeeringConnection.accepterVpcInfo.peeringOptions.allowEgressFromLocalClassicLinkToRemoteVpc`	`principal.resource.attribute.labels[records_response_elements_vpc_peering_connection_accepter_vpc_info_peering_options_allow_egress_from_local_classic_link_to_remote_vpc]`
`Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.allocationId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.networkInterfaceId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.subnetId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.vpcId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.instanceId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.volumeId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.vpnGatewayId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.groupId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.imageId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.snapshotId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.customerGateway.customerGatewayId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`responseElements.CreateFlowLogsResponse.flowLogIdSet.item`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.internetGateway.internetGatewayId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.keyPairId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`responseElements.networkAcl.networkAclId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.networkAclId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.networkInterface.networkInterfaceId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.routeTable.routeTableId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.groupId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.subnet.subnetId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.volumeId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.vpc.vpcId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.vpnGateway.vpnGatewayId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.customerGatewayId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.snapshotId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.imageId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.allocationIdsSet.items.allocationId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.customerGatewaySet.items.customerGatewayId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeFleetsRequest.FleetId.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.imagesSet.items.imageId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.instancesSet.items.instanceId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.internetGatewayIdSet.items.internetGatewayId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.networkAclIdSet.items.networkAclId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsAnalysisId.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.reservedInstancesSet.items.reservedInstancesId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.routeTableIdSet.items.routeTableId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeSecurityGroupRulesRequest.SecurityGroupRuleId.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.securityGroupIdSet.items.groupId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.snapshotSet.items.snapshotId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.subnetSet.items.subnetId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeTransitGatewayRouteTablesRequest.TransitGatewayRouteTableIds.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeTransitGatewayVpcAttachmentsRequest.TransitGatewayAttachmentIds.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeTransitGatewaysRequest.TransitGatewayIds.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.volumeSet.items.volumeId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.vpcSet.item.vpcId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeVpcClassicLinkDnsSupportRequest.VpcIds.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeVpcEndpointServiceConfigurationsRequest.ServiceId.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeVpcEndpointServicePermissionsRequest.ServiceId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.DescribeVpcEndpointsRequest.VpcEndpointId.content`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.vpcPeeringConnectionIdSet.items.vpcPeeringConnectionId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.vpcSet.items.vpcId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.vpnConnectionSet.items.vpnConnectionId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.vpnGatewaySet.items.vpnGatewayId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.attachmentId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.associationId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.GetConsoleScreenshotRequest.InstanceId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.GetSubnetCidrReservationsRequest.SubnetId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.GetVpnConnectionDeviceSampleConfigurationRequest.VpnConnectionId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.ModifyInstanceMetadataOptionsRequest.InstanceId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.ModifySecurityGroupRulesRequest.SecurityGroupRule.SecurityGroupRuleId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.ModifyVpcEndpointRequest.VpcEndpointId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.ModifyVpcEndpointServiceConfigurationRequest.ServiceId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.ModifyVpcEndpointServicePermissionsRequest.ServiceId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.allocationId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.serviceEventDetails.snapshotId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.UpdateSecurityGroupRuleDescriptionsIngressRequest.GroupId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.ReplaceVpnTunnelRequest.VpnConnectionId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.ReplaceIamInstanceProfileAssociationResponse.iamInstanceProfileAssociation.instanceId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.ModifyVolumeRequest.VolumeId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.ModifyVpnConnectionOptionsRequest.VpnConnectionId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnConnectionId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.CreateFleetResponse.fleetId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.CreateSnapshotsResponse.snapshotSet.item.snapshotId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.vpnConnection.vpnConnectionId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.instancesSet.items.instanceId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.responseElements.networkAclId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
`Records.requestParameters.routeTableId`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, `Records.responseElements.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, `Records.requestParameters.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, `Records.responseElements.customerGateway.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFlowLogs` then, `Records.responseElements.CreateFlowLogsResponse.flowLogIdSet.item` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, `Records.responseElements.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, `Records.responseElements.internetGateway.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty then, `Records.responseElements.keyPairId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, `responseElements.networkAcl.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, `Records.responseElements.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, `Records.responseElements.networkInterface.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.routeTableId` log field value is not empty then, `Records.responseElements.routeTable.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, `Records.responseElements.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, `Records.responseElements.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetId` log field value is not empty then, `Records.responseElements.subnet.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, `Records.responseElements.vpc.vpcId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnGateway.vpnGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, `Records.requestParameters.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkAclEntry` and the `Records.requestParameters.networkAclId` log field value is not empty then, `Records.requestParameters.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, `Records.requestParameters.groupId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, `Records.requestParameters.snapshotId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, `Records.requestParameters.subnetId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, `Records.requestParameters.volumeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, `Records.requestParameters.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.allocationIdsSet.items.allocationId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddressTransfers` and the `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field value is not empty then, `Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.customerGatewaySet.items.customerGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.imagesSet.items.imageId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.instancesSet.items.instanceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.internetGatewayIdSet.items.internetGatewayId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkAclIdSet.items.networkAclId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field is mapped to the `target.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.networkInterfaceIdSet.items.networkInterfaceId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesSet.items.reservedInstancesId` log field is mapped to the `about.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.reservedInstancesModificationSet.items.reservedInstancesModificationId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, `Records.requestParameters.reservedInstancesModification`
	`target.resource.resource_type`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `VPC_NETWORK`. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `IP_ADDRESS`. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE`. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `SUBNET`. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `VPC_NETWORK`. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `VOLUME`. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `GATEWAY`. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE`. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `IMAGE`. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `SNAPSHOT`. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `GATEWAY`. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `IMAGE`. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `GATEWAY`. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty or the `Records.requestParameters.keyName` log field value is not empty) then, the `target.resource.resource_type` UDM field is set to `CREDENTIAL`. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `GATEWAY`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRoute` `DeleteRoute` `DeleteRouteTable` and the `Records.requestParameters.routeTableId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.requestParameters.routeTableId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `SNAPSHOT`. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetArn` log field value is not empty or the `Records.responseElements.subnet.subnetId` log field value is not empty) then, the `target.resource.resource_type` UDM field is set to `SUBNET`. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `VOLUME`. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `VPC_NETWORK`. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty and if the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointType` log field value is equal to `Interface` then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointType` log field value matches the regular expression pattern `Gateway` then, the `target.resource.resource_type` UDM field is set to `GATEWAY`. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `GATEWAY`. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `GATEWAY`. Else, if the `Records.eventName` log field value is equal to `DeleteInternetGateway` and the `Records.requestParameters.internetGatewayId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `GATEWAY`. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `GATEWAY`. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `SNAPSHOT`. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `SUBNET`. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `VOLUME`. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `IMAGE`. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, the `target.resource.resource_type` UDM field is set to `IP_ADDRESS`. Else, the `about.resource.resource_type` UDM field is set to `IP_ADDRESS`. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `IP_ADDRESS`. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, the `target.resource.resource_type` UDM field is set to `GATEWAY`. Else, the `about.resource.resource_type` UDM field is set to `GATEWAY`. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `IMAGE`. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `SNAPSHOT`. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE`. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `VPC_NETWORK`. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE`. Else, the `about.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE`. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE`. Else, the `about.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE`. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, the `target.resource.resource_type` UDM field is set to `GATEWAY`. Else, the `about.resource.resource_type` UDM field is set to `GATEWAY`. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty or the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field value is not empty ) then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field value is not empty or the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty ) then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `SNAPSHOT`. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `GATEWAY`. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE`. Else, the `about.resource.resource_type` UDM field is set to `FIREWALL_RULE`. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, the `about.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE`. Else, the `about.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE`. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, the `target.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE`. Else, the `about.resource.resource_type` UDM field is set to `VIRTUAL_MACHINE`. Else, if the `Records.eventName` log field value is equal to `DescribeRouteTables` then, Iterate through log field `Records.requestParameters.routeTableIdSet.items`, then If the `index` value is equal to `0` then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, the `about.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroupRules` and the `Records.requestParameters.DescribeSecurityGroupRulesRequest.SecurityGroupRuleId.content` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroups` then, Iterate through log field `Records.requestParameters.securityGroupIdSet.items`, then If the `index` value is equal to `0` then, the `target.resource.resource_type` UDM field is set to `FIREWALL_RULE`. Else, the `about.resource.resource_type` UDM field is set to `FIREWALL_RULE`. Else, if the `Records.eventName` log field value is equal to `DescribeSnapshots` then, Iterate through log field `Records.requestParameters.snapshotSet.items`, then If the `index` value is equal to `0` then, the `target.resource.resource_type` UDM field is set to `SNAPSHOT`. Else, the `about.resource.resource_type` UDM field is set to `SNAPSHOT`. Else, if the `Records.eventName` log field value is equal to `DescribeSubnets` then, Iterate through log field `Records.requestParameters.subnetSet.items`, then If the `index` value is equal to `0` then, the `target.resource.resource_type` UDM field is set to `SUBNET`. Else, the `about.resource.resource_type` UDM field is set to `SUBNET`. Else, if the `Records.eventName` log field value is equal to `DescribeTransitGatewayRouteTables` and the `Records.requestParameters.DescribeTransitGatewayRouteTablesRequest.TransitGatewayRouteTableIds.content` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `DescribeTransitGatewayVpcAttachments` and the `Records.requestParameters.DescribeTransitGatewayVpcAttachmentsRequest.TransitGatewayAttachmentIds.content` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `DescribeTransitGateways` and the `Records.requestParameters.DescribeTransitGatewaysRequest.TransitGatewayIds.content` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `GATEWAY`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeVolumeStatus` `DescribeVolumes` then, Iterate through log field `Records.requestParameters.volumeSet.items`, then If the `index` value is equal to `0` then, the `target.resource.resource_type` UDM field is set to `VOLUME`. Else, the `about.resource.resource_type` UDM field is set to `VOLUME`. Else, if the `Records.eventName` log field value is equal to `DescribeVpcClassicLink` then, Iterate through log field `Records.requestParameters.vpcSet.item`, then If the `index` value is equal to `0` then, the `target.resource.resource_type` UDM field is set to `VPC_NETWORK`. Else, the `about.resource.resourc`
	`target.resource.attribute.cloud.environment`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.vpcId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AllocateAddress` `AssociateAddress` and the `Records.responseElements.allocationId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AssignPrivateIpAddresses` `DescribeNetworkInterfaceAttribute` `ModifyNetworkInterfaceAttribute` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssociateRouteTable` and the `Records.requestParameters.subnetId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachInternetGateway` `DeleteVpc` `DescribeVpcAttribute` `DetachInternetGateway` `ModifyVpcAttribute` and the `Records.requestParameters.vpcId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachVolume` `DescribeVolumeAttribute` `DetachVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `DeleteVpnGateway` `DetachVpnGateway` and the `Records.requestParameters.vpnGatewayId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value matches the regular expression pattern `AuthorizeSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.imageId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.snapshotId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` and the `Records.responseElements.customerGateway.customerGatewayId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateImage` `RegisterImage` and the `Records.responseElements.imageId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.internetGatewayId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.responseElements.keyPairId` log field value is not empty or the `Records.requestParameters.keyName` log field value is not empty) then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.networkAclId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and the `Records.responseElements.networkAclId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.networkInterfaceId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateRoute` `DeleteRoute` `DeleteRouteTable` and the `Records.requestParameters.routeTableId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.responseElements.groupId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.snapshotId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetArn` log field value is not empty or the `Records.responseElements.subnet.subnetId` log field value is not empty) then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateVolume` and the `Records.responseElements.volumeId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.vpcId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateVpnGateway` and the `Records.responseElements.vpnGateway.vpnGatewayId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeleteCustomerGateway` and the `Records.requestParameters.customerGatewayId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeleteInternetGateway` and the `Records.requestParameters.internetGatewayId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeleteNatGateway` and the `Records.requestParameters.DeleteNatGatewayRequest.NatGatewayId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScope` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeRequest.NetworkInsightsAccessScopeId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.DeleteNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeAnalysisId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeleteNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeleteSecurityGroup` and the `Records.requestParameters.groupId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSnapshot` `DescribeSnapshotAttribute` and the `Records.requestParameters.snapshotId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DeleteSubnet` `ModifySubnetAttribute` and the `Records.requestParameters.subnetId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeleteVolume` and the `Records.requestParameters.volumeId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpoints` and the `Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.content` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DeleteVpcEndpointServiceConfigurations` and the `Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.VpcEndpointId.ServiceId.content` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DeregisterImage` `DescribeImageAttribute` `ModifyImageAttribute` and the `Records.requestParameters.imageId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.allocationIdsSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` and the `Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.content` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeCustomerGateways` then, Iterate through log field `Records.requestParameters.customerGatewaySet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeFastLaunchImages` and the `Records.requestParameters.DescribeFastLaunchImagesRequest.ImageId.content` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeFastSnapshotRestores` and the `Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.content` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeFleets` and the `Records.requestParameters.DescribeFleetsRequest.FleetId.content` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeFlowLogs` and the `Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.content` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeImages` then, Iterate through log field `Records.requestParameters.imagesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstanceAttribute` `ModifyInstanceAttribute` and the `Records.requestParameters.instanceId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeInstanceCreditSpecifications` and the `Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.content` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `DescribeInstances` `DescribeInstanceStatus` `RebootInstances` `StartInstances` `StopInstances` `TerminateInstances` then, Iterate through log field `Records.requestParameters.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeInternetGateways` then, Iterate through log field `Records.requestParameters.internetGatewayIdSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.content` log field value is not empty or the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field value is not empty ) then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field value is not empty or the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateId` log field value is not empty ) then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeLockedSnapshots` and the `Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.content` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeManagedPrefixLists` and the `Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.content` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeNatGateways` and the `Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.content` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkAcls` then, Iterate through log field `Records.requestParameters.networkAclIdSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopeAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.NetworkInsightsAccessScopeId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAccessScopes` and the `Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.content` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsPaths` and the `Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.content` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInterfaces` then, Iterate through log field `Records.requestParameters.networkInterfaceIdSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesListings` then, Iterate through log field `Records.requestParameters.reservedInstancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeReservedInstancesModifications` then, Iterate through log field `Records.requestParameters.reservedInstancesModificationSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeRouteTables` then, Iterate through log field `Records.requestParameters.routeTableIdSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroupRules` and the `Records.requestParameters.DescribeSecurityGroupRulesRequest.SecurityGroupRuleId.content` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroups` then, Iterate through log field `Records.requestParameters.securityGroupIdSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeSnapshots` then, Iterate through log field `Records.requestParameters.snapshotSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeSubnets` then, Iterate through log field `Records.requestParameters.subnetSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeTransitGatewayRouteTables` and the `Records.requestParameters.DescribeTransitGatewayRouteTablesRequest.TransitGatewayRouteTableIds.content` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeTransitGatewayVpcAttachments` and the `Records.requestParameters.DescribeTransitGatewayVpcAttachmentsRequest.TransitGatewayAttachmentIds.content` log field value is
`Records.responseElements.vpcPeeringConnection.accepterVpcInfo.cidrBlock`	`target.resource.attribute.labels[records_response_elements_vpc_peering_connection_accepter_vpc_info_cidr_block]`
`Records.responseElements.vpcPeeringConnection.accepterVpcInfo.cidrBlockSet.items.cidrBlock`	`target.resource.attribute.labels[records_response_elements_vpc_peering_connection_accepter_vpc_info_cidr_block_set_items_cidr_block]`	Iterate through log field `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.cidrBlockSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpc_peering_connection_accepter_vpc_info_cidr_block_set_items_cidr_block` and `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.cidrBlockSet.items.cidrBlock` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpcPeeringConnection.accepterVpcInfo.region`	`target.location.name`
`Records.requestParameters.destinationRegion`	`target.location.name`
`Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.requestParameters.instanceId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.requestParameters.networkInterfaceId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.requestParameters.vpcId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.internetGateway.ownerId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`responseElements.networkAcl.vpcId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`responseElements.networkAcl.ownerId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.networkInterface.ownerId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.networkInterface.subnetId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.networkInterface.vpcId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.routeTable.routeSet.items.gatewayId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.routeTable.vpcId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.routeTable.ownerId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.ownerId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.requestParameters.volumeId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.subnet.ownerId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.subnet.vpcId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.vpc.ownerId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.vpnConnection.vpnGatewayId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.volumeId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.networkAcl.vpcId`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item`	`target.resource_ancestors.product_object_id`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, `Records.responseElements.vpcPeeringConnection.requesterVpcInfo.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, `Records.requestParameters.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, `Records.requestParameters.instanceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, `Records.responseElements.internetGateway.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, `Records.responseElements.networkAcl.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, `responseElements.networkAcl.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, `Records.responseElements.networkInterface.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, `Records.responseElements.networkInterface.subnetId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, `Records.responseElements.networkInterface.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, `Records.responseElements.routeTable.routeSet.items.gatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, `Records.responseElements.routeTable.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, `Records.responseElements.routeTable.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, `Records.responseElements.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, `Records.responseElements.volumeId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, `Records.responseElements.subnet.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, `Records.responseElements.subnet.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, `Records.responseElements.vpc.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsPathId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceIds.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, `Records.responseElements.vpnConnection.vpnGatewayId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, `Records.requestParameters.networkInterfaceId` log field is mapped to the `target.resource_ancestors.product_object_id` UDM field.
	`target.resource_ancestors.resource_type`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `SERVICE_ACCOUNT`. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `VIRTUAL_MACHINE`. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `VIRTUAL_MACHINE`. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `VPC_NETWORK`. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `VIRTUAL_MACHINE`. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `SERVICE_ACCOUNT`. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `SUBNET`. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `VPC_NETWORK`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `VPC_NETWORK`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `VPC_NETWORK`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `SERVICE_ACCOUNT`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `SERVICE_ACCOUNT`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `VPC_NETWORK`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `SUBNET`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfaceId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `GATEWAY`. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `VPC_NETWORK`. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `SERVICE_ACCOUNT`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `SERVICE_ACCOUNT`. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `VOLUME`. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `SERVICE_ACCOUNT`. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `VPC_NETWORK`. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `SERVICE_ACCOUNT`. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `VPC_NETWORK`. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `SERVICE_ACCOUNT`. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `SUBNET`. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `GATEWAY`. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `GATEWAY`. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then the `target.resource_ancestors.resource_type` UDM field is set to `VIRTUAL_MACHINE`. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `GATEWAY`. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE`. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `LOAD_BALANCER`. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE`.
	`target.resource_ancestors.attribute.cloud.environment`	If the `Records.eventName` log field value is equal to `AcceptVpcPeeringConnection` and the `Records.responseElements.vpcPeeringConnection.accepterVpcInfo.ownerId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.instanceId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachNetworkInterface` `AttachVolume` `DetachVolume` and the `Records.requestParameters.instanceId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `AttachVpnGateway` `CreateSecurityGroup` `DetachVpnGateway` and the `Records.requestParameters.vpcId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateImage` and the `Records.requestParameters.instanceId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateInternetGateway` and the `Records.responseElements.internetGateway.ownerId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.subnetId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateNatGateway` and the `Records.responseElements.CreateNatGatewayResponse.natGateway.vpcId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `Records.responseElements.networkAcl.vpcId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkAcl` and the `responseElements.networkAcl.ownerId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.ownerId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.vpcId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` and the `Records.responseElements.networkInterface.subnetId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterfacePermission` and the `Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.awsAccountId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateRoute` and the `Records.responseElements.routeTable.routeSet.items.gatewayId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.vpcId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateRouteTable` and the `Records.responseElements.routeTable.ownerId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value contain one of the following values `CreateSnapshot` `RunInstances` and the `Records.responseElements.ownerId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSnapshot` and the `Records.responseElements.volumeId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.ownerId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.vpcId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateVpc` and the `Records.responseElements.vpc.ownerId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ownerId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpoint` and the `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.subnetIdSet.item` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `DescribeNetworkInsightsAnalyses` and the `Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.vpcEndpoint.NetworkInsightsPathId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ModifyVpnConnectionOptions` and the `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vpnGatewayId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `ModifyVpnTunnelOptions` and the `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vpnConnectionId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateFleet` then, Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateVpnConnection` and the `Records.responseElements.vpnConnection.vpnGatewayId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `AttachNetworkInterface` and the `Records.requestParameters.networkInterfaceId` log field value is not empty then, the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.vpcPeeringConnection.status.code`	`target.resource.attribute.labels[records_response_elements_vpc_peering_connection_status_code]`
`Records.responseElements.vpcPeeringConnection.status.message`	`target.resource.attribute.labels[records_response_elements_vpc_peering_connection_status_message]`
`Records.responseElements.publicIp`	`target.ip`	If the `Records.eventName` log field value is equal to `AllocateAddress` then, `Records.responseElements.publicIp` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `AssignPrivateIpAddresses` then, Iterate through log field `Records.responseElements.assignedPrivateIpAddressesSet.assignedPrivateIpAddressSetType`, then `Records.responseElements.assignedPrivateIpAddressesSet.assignedPrivateIpAddressSetType.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` then, `Records.requestParameters.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` then, `Records.responseElements.customerGateway.ipAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` then, `Records.responseElements.networkInterface.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.publicIpsSet.items`, then `Records.requestParameters.publicIpsSet.items.publicIp` log field is mapped to the `target.ip` UDM field. Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.responseElements.instancesSet.items.ipAddress` log field is mapped to the `target.ip` UDM field. Else, `Records.responseElements.instancesSet.items.ipAddress` log field is mapped to the `about.ip` UDM field. Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.responseElements.instancesSet.items.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, `Records.responseElements.instancesSet.items.privateIpAddress` log field is mapped to the `about.ip` UDM field.
`Records.responseElements.assignedPrivateIpAddressesSet.assignedPrivateIpAddressSetType.privateIpAddress`	`target.ip`	If the `Records.eventName` log field value is equal to `AllocateAddress` then, `Records.responseElements.publicIp` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `AssignPrivateIpAddresses` then, Iterate through log field `Records.responseElements.assignedPrivateIpAddressesSet.assignedPrivateIpAddressSetType`, then `Records.responseElements.assignedPrivateIpAddressesSet.assignedPrivateIpAddressSetType.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` then, `Records.requestParameters.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` then, `Records.responseElements.customerGateway.ipAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` then, `Records.responseElements.networkInterface.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.publicIpsSet.items`, then `Records.requestParameters.publicIpsSet.items.publicIp` log field is mapped to the `target.ip` UDM field. Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.responseElements.instancesSet.items.ipAddress` log field is mapped to the `target.ip` UDM field. Else, `Records.responseElements.instancesSet.items.ipAddress` log field is mapped to the `about.ip` UDM field. Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.responseElements.instancesSet.items.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, `Records.responseElements.instancesSet.items.privateIpAddress` log field is mapped to the `about.ip` UDM field.
`Records.requestParameters.privateIpAddress`	`target.ip`	If the `Records.eventName` log field value is equal to `AllocateAddress` then, `Records.responseElements.publicIp` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `AssignPrivateIpAddresses` then, Iterate through log field `Records.responseElements.assignedPrivateIpAddressesSet.assignedPrivateIpAddressSetType`, then `Records.responseElements.assignedPrivateIpAddressesSet.assignedPrivateIpAddressSetType.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` then, `Records.requestParameters.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` then, `Records.responseElements.customerGateway.ipAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` then, `Records.responseElements.networkInterface.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.publicIpsSet.items`, then `Records.requestParameters.publicIpsSet.items.publicIp` log field is mapped to the `target.ip` UDM field. Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.responseElements.instancesSet.items.ipAddress` log field is mapped to the `target.ip` UDM field. Else, `Records.responseElements.instancesSet.items.ipAddress` log field is mapped to the `about.ip` UDM field. Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.responseElements.instancesSet.items.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, `Records.responseElements.instancesSet.items.privateIpAddress` log field is mapped to the `about.ip` UDM field.
`Records.responseElements.customerGateway.ipAddress`	`target.ip`	If the `Records.eventName` log field value is equal to `AllocateAddress` then, `Records.responseElements.publicIp` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `AssignPrivateIpAddresses` then, Iterate through log field `Records.responseElements.assignedPrivateIpAddressesSet.assignedPrivateIpAddressSetType`, then `Records.responseElements.assignedPrivateIpAddressesSet.assignedPrivateIpAddressSetType.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` then, `Records.requestParameters.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` then, `Records.responseElements.customerGateway.ipAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` then, `Records.responseElements.networkInterface.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.publicIpsSet.items`, then `Records.requestParameters.publicIpsSet.items.publicIp` log field is mapped to the `target.ip` UDM field. Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.responseElements.instancesSet.items.ipAddress` log field is mapped to the `target.ip` UDM field. Else, `Records.responseElements.instancesSet.items.ipAddress` log field is mapped to the `about.ip` UDM field. Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.responseElements.instancesSet.items.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, `Records.responseElements.instancesSet.items.privateIpAddress` log field is mapped to the `about.ip` UDM field.
`Records.responseElements.networkInterface.privateIpAddress`	`target.ip`	If the `Records.eventName` log field value is equal to `AllocateAddress` then, `Records.responseElements.publicIp` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `AssignPrivateIpAddresses` then, Iterate through log field `Records.responseElements.assignedPrivateIpAddressesSet.assignedPrivateIpAddressSetType`, then `Records.responseElements.assignedPrivateIpAddressesSet.assignedPrivateIpAddressSetType.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` then, `Records.requestParameters.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` then, `Records.responseElements.customerGateway.ipAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` then, `Records.responseElements.networkInterface.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.publicIpsSet.items`, then `Records.requestParameters.publicIpsSet.items.publicIp` log field is mapped to the `target.ip` UDM field. Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.responseElements.instancesSet.items.ipAddress` log field is mapped to the `target.ip` UDM field. Else, `Records.responseElements.instancesSet.items.ipAddress` log field is mapped to the `about.ip` UDM field. Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.responseElements.instancesSet.items.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, `Records.responseElements.instancesSet.items.privateIpAddress` log field is mapped to the `about.ip` UDM field.
`Records.requestParameters.publicIpsSet.items.publicIp`	`target.ip`	If the `Records.eventName` log field value is equal to `AllocateAddress` then, `Records.responseElements.publicIp` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `AssignPrivateIpAddresses` then, Iterate through log field `Records.responseElements.assignedPrivateIpAddressesSet.assignedPrivateIpAddressSetType`, then `Records.responseElements.assignedPrivateIpAddressesSet.assignedPrivateIpAddressSetType.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` then, `Records.requestParameters.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` then, `Records.responseElements.customerGateway.ipAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` then, `Records.responseElements.networkInterface.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.publicIpsSet.items`, then `Records.requestParameters.publicIpsSet.items.publicIp` log field is mapped to the `target.ip` UDM field. Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.responseElements.instancesSet.items.ipAddress` log field is mapped to the `target.ip` UDM field. Else, `Records.responseElements.instancesSet.items.ipAddress` log field is mapped to the `about.ip` UDM field. Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.responseElements.instancesSet.items.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, `Records.responseElements.instancesSet.items.privateIpAddress` log field is mapped to the `about.ip` UDM field.
`Records.responseElements.instancesSet.items.ipAddress`	`target.ip`	If the `Records.eventName` log field value is equal to `AllocateAddress` then, `Records.responseElements.publicIp` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `AssignPrivateIpAddresses` then, Iterate through log field `Records.responseElements.assignedPrivateIpAddressesSet.assignedPrivateIpAddressSetType`, then `Records.responseElements.assignedPrivateIpAddressesSet.assignedPrivateIpAddressSetType.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` then, `Records.requestParameters.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` then, `Records.responseElements.customerGateway.ipAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` then, `Records.responseElements.networkInterface.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.publicIpsSet.items`, then `Records.requestParameters.publicIpsSet.items.publicIp` log field is mapped to the `target.ip` UDM field. Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.responseElements.instancesSet.items.ipAddress` log field is mapped to the `target.ip` UDM field. Else, `Records.responseElements.instancesSet.items.ipAddress` log field is mapped to the `about.ip` UDM field. Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.responseElements.instancesSet.items.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, `Records.responseElements.instancesSet.items.privateIpAddress` log field is mapped to the `about.ip` UDM field.
`Records.responseElements.instancesSet.items.privateIpAddress`	`target.ip`	If the `Records.eventName` log field value is equal to `AllocateAddress` then, `Records.responseElements.publicIp` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `AssignPrivateIpAddresses` then, Iterate through log field `Records.responseElements.assignedPrivateIpAddressesSet.assignedPrivateIpAddressSetType`, then `Records.responseElements.assignedPrivateIpAddressesSet.assignedPrivateIpAddressSetType.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `AssociateAddress` then, `Records.requestParameters.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateCustomerGateway` then, `Records.responseElements.customerGateway.ipAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInterface` then, `Records.responseElements.networkInterface.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeAddresses` then, Iterate through log field `Records.requestParameters.publicIpsSet.items`, then `Records.requestParameters.publicIpsSet.items.publicIp` log field is mapped to the `target.ip` UDM field. Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.responseElements.instancesSet.items.ipAddress` log field is mapped to the `target.ip` UDM field. Else, `Records.responseElements.instancesSet.items.ipAddress` log field is mapped to the `about.ip` UDM field. Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, `Records.responseElements.instancesSet.items.privateIpAddress` log field is mapped to the `target.ip` UDM field. Else, `Records.responseElements.instancesSet.items.privateIpAddress` log field is mapped to the `about.ip` UDM field.
`Records.responseElements.publicIpv4Pool`	`target.resource.attribute.labels[records_response_elements_public_ipv4pool]`
`Records.responseElements.networkBorderGroup`	`target.resource.attribute.labels[records_response_elements_network_border_group]`
`Records.requestParameters.domain`	`target.resource.attribute.labels[records_request_parameters_domain]`
`Records.responseElements.domain`	`target.resource.attribute.labels[records_response_elements_domain]`
`Records.requestParameters.tagSpecificationSet.items.resourceType`	`target.resource.attribute.labels[records_request_parameters_tag_specification_set_items_resource_type]`	Iterate through log field `Records.requestParameters.tagSpecificationSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_tag_specification_set_items_resource_type` and `Records.requestParameters.tagSpecificationSet.items.resourceType` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.tagSpecificationSet.items.tags.key`	`target.resource.attribute.labels[records_request_parameters_tag_specification_set_items_tags_key]`	Iterate through log field `Records.requestParameters.tagSpecificationSet.items`, then Iterate through log field `Records.requestParameters.tagSpecificationSet.items.tags`, then `Records.requestParameters.tagSpecificationSet.items.tags.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.tagSpecificationSet.items.tags.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.tagSpecificationSet.items.tags.value`	`target.resource.attribute.labels[records_request_parameters_tag_specification_set_items_tags_key]`	Iterate through log field `Records.requestParameters.tagSpecificationSet.items`, then Iterate through log field `Records.requestParameters.tagSpecificationSet.items.tags`, then `Records.requestParameters.tagSpecificationSet.items.tags.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.tagSpecificationSet.items.tags.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.networkBorderGroup`	`target.resource.attribute.labels[records_request_parameters_network_border_group]`
`Records.requestParameters.secondaryPrivateIpAddressCount`	`target.resource.attribute.labels[records_request_parameters_secondary_private_ip_address_count]`
`Records.responseElements._return`	`target.resource.attribute.labels[records_response_elements__return]`
`Records.requestParameters.allowReassociation`	`target.resource.attribute.labels[records_request_parameters_allow_reassociation]`
`Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn`	`target.resource_ancestors.name`	If the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.name` UDM field.
`Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item`	`target.resource_ancestors.name`	If the `Records.eventName` log field value is equal to `AssociateIamInstanceProfile` and the `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field value is not empty then, `Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn` log field is mapped to the `target.resource_ancestors.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.networkLoadBalancerArnSet.item` log field is mapped to the `target.resource_ancestors.name` UDM field.
`Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.state`	`target.resource.attribute.labels[records_response_elements_associate_iam_instance_profile_response_iam_instance_profile_association_state]`
`Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.associationId`	`target.resource.attribute.labels[records_response_elements_associate_iam_instance_profile_response_iam_instance_profile_association_association_id]`
`Records.responseElements.AssociateIamInstanceProfileResponse.requestId`	`target.resource.attribute.labels[records_response_elements_associate_iam_instance_profile_response_request_id]`
`Records.requestParameters.AssociateIamInstanceProfileRequest.IamInstanceProfile.Name`	`target.resource_ancestors.attribute.labels[records_request_parameters_associate_iam_instance_profile_request_iam_instance_profile_name]`
`Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.iamInstanceProfile.id`	`target.resource_ancestors.attribute.labels[records_response_elements_associate_iam_instance_profile_response_iam_instance_profile_association_iam_instance_profile_id]`
`Records.responseElements.AssociateIamInstanceProfileResponse.xmlns`	`target.resource_ancestors.attribute.labels[records_response_elements_associate_iam_instance_profile_response_xmlns]`
`Records.responseElements.associationState.state`	`target.resource.attribute.labels[records_response_elements_association_state_state]`
`Records.responseElements.associationId`	`target.resource.attribute.labels[records_response_elements_association_id]`
`Records.requestParameters.routeTableId`	`target.resource.attribute.labels[records_request_parameters_route_table_id]`	If the `Records.eventName` log field value contain one of the following values `CreateRoute` `DeleteRoute` `DeleteRouteTable` and the `Records.requestParameters.routeTableId` log field value is not empty then, `Records.requestParameters.routeTableId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_route_table_id` and `Records.requestParameters.routeTableId` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.internetGatewayId`	`target.resource.attribute.labels[records_request_parameters_internet_gateway_id]`	If the `Records.eventName` log field value is equal to `DeleteInternetGateway` and the `Records.requestParameters.internetGatewayId` log field value is not empty then, `Records.requestParameters.internetGatewayId` log field is mapped to the `target.resource.product_object_id` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_internet_gateway_id` and `Records.requestParameters.internetGatewayId` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.networkCardIndex`	`target.resource.attribute.labels[records_response_elements_network_card_index]`
`Records.requestParameters.deviceIndex`	`target.resource.attribute.labels[records_request_parameters_device_index]`
`Records.responseElements.attachmentId`	`target.resource.attribute.labels[records_response_elements_attachment_id]`
`Records.responseElements.deleteOnTermination`	`target.resource.attribute.labels[records_response_elements_delete_on_termination]`
`Records.requestParameters.deleteOnTermination`	`target.resource.attribute.labels[records_request_parameters_delete_on_termination]`
`Records.responseElements.status`	`target.resource.attribute.labels[records_response_elements_status]`
`Records.requestParameters.device`	`target.resource.attribute.labels[records_request_parameters_device]`
`Records.responseElements.attachTime`	`target.resource.attribute.labels[records_response_elements_attach_time]`
`Records.responseElements.attachment.state`	`target.resource.attribute.labels[records_response_elements_attachment_state]`
`Records.requestParameters.ipPermissions.items.fromPort`	`target.resource.attribute.labels[records_request_parameters_ip_permissions_items_from_port]`	Iterate through log field `Records.requestParameters.ipPermissions.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_ip_permissions_items_from_port` and `Records.requestParameters.ipPermissions.items.fromPort` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ipPermissions.items.toPort`	`target.resource.attribute.labels[records_request_parameters_ip_permissions_items_to_port]`	Iterate through log field `Records.requestParameters.ipPermissions.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_ip_permissions_items_to_port` and `Records.requestParameters.ipPermissions.items.toPort` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ipPermissions.items.ipRanges.items.cidrIp`	`principal.artifact.network.ip_subnet_range`	Iterate through log field `Records.requestParameters.ipPermissions.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.requestParameters.ipPermissions.items.ipRanges.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.ipPermissions.items.ipRanges.items.cidrIp` log field is mapped to the `principal.artifact.network.ip_subnet_range` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_ip_permissions_items_cider_ip` and `Records.requestParameters.ipPermissions.items.ipRanges.items.cidrIp` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.requestParameters.ipPermissions.items.ipRanges.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_ip_permissions_items_cider_ip` and `Records.requestParameters.ipPermissions.items.ipRanges.items.cidrIp` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ipPermissions.items.ipProtocol`	`network.ip_protocol`	Iterate through log field `Records.requestParameters.ipPermissions.items`, then If the `index` value is equal to `0` and if the `Records.requestParameters.ipPermissions.items.ipProtocol` log field value is equal to `tcp` then, the `network.ip_protocol` UDM field is set to `TCP`. Else, if the `Records.requestParameters.ipPermissions.items.ipProtocol` log field value is equal to `udp` then, the `network.ip_protocol` UDM field is set to `UDP`. Else, if the `Records.requestParameters.ipPermissions.items.ipProtocol` log field value is equal to `icmp` then, the `network.ip_protocol` UDM field is set to `ICMP`. Else, if the `Records.requestParameters.ipPermissions.items.ipProtocol` log field value is equal to `icmp6` then, the `network.ip_protocol` UDM field is set to `ICMP6`. Else, If the `Records.requestParameters.ipPermissions.items.ipProtocol` log field value is equal to `tcp` then, the `about.network.ip_protocol` UDM field is set to `TCP`. Else, if the `Records.requestParameters.ipPermissions.items.ipProtocol` log field value is equal to `udp` then, the `about.network.ip_protocol` UDM field is set to `UDP`. Else, if the `Records.requestParameters.ipPermissions.items.ipProtocol` log field value is equal to `icmp` then, the `about.network.ip_protocol` UDM field is set to `ICMP`. Else, if the `Records.requestParameters.ipPermissions.items.ipProtocol` log field value is equal to `icmp6` then, the `about.network.ip_protocol` UDM field is set to `ICMP6`. If the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and if the `Records.requestParameters.aclProtocol` log field value is equal to `6` then, the `network.ip_protocol` UDM field is set to `TCP`. Else, if the `Records.requestParameters.aclProtocol` log field value is equal to `17` then, the `network.ip_protocol` UDM field is set to `UDP`. Else, if the `Records.requestParameters.aclProtocol` log field value is equal to `1` then, the `network.ip_protocol` UDM field is set to `ICMP`. Else, if the `Records.requestParameters.aclProtocol` log field value is equal to `58` then, the `network.ip_protocol` UDM field is set to `ICMPV6`.
`Records.requestParameters.aclProtocol`	`network.ip_protocol`	Iterate through log field `Records.requestParameters.ipPermissions.items`, then If the `index` value is equal to `0` and if the `Records.requestParameters.ipPermissions.items.ipProtocol` log field value is equal to `tcp` then, the `network.ip_protocol` UDM field is set to `TCP`. Else, if the `Records.requestParameters.ipPermissions.items.ipProtocol` log field value is equal to `udp` then, the `network.ip_protocol` UDM field is set to `UDP`. Else, if the `Records.requestParameters.ipPermissions.items.ipProtocol` log field value is equal to `icmp` then, the `network.ip_protocol` UDM field is set to `ICMP`. Else, if the `Records.requestParameters.ipPermissions.items.ipProtocol` log field value is equal to `icmp6` then, the `network.ip_protocol` UDM field is set to `ICMP6`. Else, If the `Records.requestParameters.ipPermissions.items.ipProtocol` log field value is equal to `tcp` then, the `about.network.ip_protocol` UDM field is set to `TCP`. Else, if the `Records.requestParameters.ipPermissions.items.ipProtocol` log field value is equal to `udp` then, the `about.network.ip_protocol` UDM field is set to `UDP`. Else, if the `Records.requestParameters.ipPermissions.items.ipProtocol` log field value is equal to `icmp` then, the `about.network.ip_protocol` UDM field is set to `ICMP`. Else, if the `Records.requestParameters.ipPermissions.items.ipProtocol` log field value is equal to `icmp6` then, the `about.network.ip_protocol` UDM field is set to `ICMP6`. If the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and if the `Records.requestParameters.aclProtocol` log field value is equal to `6` then, the `network.ip_protocol` UDM field is set to `TCP`. Else, if the `Records.requestParameters.aclProtocol` log field value is equal to `17` then, the `network.ip_protocol` UDM field is set to `UDP`. Else, if the `Records.requestParameters.aclProtocol` log field value is equal to `1` then, the `network.ip_protocol` UDM field is set to `ICMP`. Else, if the `Records.requestParameters.aclProtocol` log field value is equal to `58` then, the `network.ip_protocol` UDM field is set to `ICMPV6`.
`Records.responseElements.securityGroupRuleSet.items.description`	`security_result.rule_labels[records_response_elements_security_group_rule_set_items_description]`	Iterate through log field `Records.responseElements.securityGroupRuleSet.items`, then the `security_result.rule_labels.key` UDM field is set to `records_response_elements_security_group_rule_set_items_description` and `Records.responseElements.securityGroupRuleSet.items.description` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.ipPermissions.items.ipRanges.items.description`	`target.resource.attribute.labels[records_request_parameters_ip_permissions_items_ip_ranges_items_description]`	Iterate through log field `Records.requestParameters.ipPermissions.items`, then Iterate through log field `Records.requestParameters.ipPermissions.items.ipRanges.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_ip_permissions_items_description` and `Records.requestParameters.ipPermissions.items.ipRanges.items.description` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ipPermissions.items.prefixListIds`	`target.resource.attribute.labels[records_request_parameters_ip_permissions_items_prefix_list_ids]`	Iterate through log field `Records.requestParameters.ipPermissions.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_ip_permissions_items_prefix_list_ids` and `Records.requestParameters.ipPermissions.items.prefixListIds` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.securityGroupRuleSet.items.groupId`	`security_result.rule_id`	Iterate through log field `Records.responseElements.securityGroupRuleSet.items`, then `Records.responseElements.securityGroupRuleSet.items.groupId` log field is mapped to the `security_result.rule_id` UDM field.`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.groupSet.item.groupId` log field is mapped to the `security_result.rule_id` UDM field.
`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.groupSet.item.groupId`	`security_result.rule_id`	Iterate through log field `Records.responseElements.securityGroupRuleSet.items`, then `Records.responseElements.securityGroupRuleSet.items.groupId` log field is mapped to the `security_result.rule_id` UDM field.`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.groupSet.item.groupId` log field is mapped to the `security_result.rule_id` UDM field.
`Records.responseElements.securityGroupRuleSet.items.toPort`	`security_result.rule_labels[records_response_elements_security_group_rule_set_items_to_port]`	Iterate through log field `Records.responseElements.securityGroupRuleSet.items`, then the `security_result.rule_labels.key` UDM field is set to `records_response_elements_security_group_rule_set_items_to_port` and `Records.responseElements.securityGroupRuleSet.items.toPort` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.responseElements.networkInterface.groupSet.items.groupId`	`security_result.rule_id`	Iterate through log field `Records.responseElements.networkInterface.groupSet.items`, then `Records.responseElements.networkInterface.groupSet.items.groupId` log field is mapped to the `security_result.rule_id` UDM field and `Records.responseElements.networkInterface.groupSet.items.groupName` log field is mapped to the `security_result.rule_name` UDM field.
`Records.responseElements.networkInterface.groupSet.items.groupName`	`security_result.rule_id`	Iterate through log field `Records.responseElements.networkInterface.groupSet.items`, then `Records.responseElements.networkInterface.groupSet.items.groupId` log field is mapped to the `security_result.rule_id` UDM field and `Records.responseElements.networkInterface.groupSet.items.groupName` log field is mapped to the `security_result.rule_name` UDM field.
`Records.responseElements.securityGroupRuleSet.items.fromPort`	`security_result.rule_labels[records_response_elements_security_group_rule_set_items_from_port]`	Iterate through log field `Records.responseElements.securityGroupRuleSet.items`, then the `security_result.rule_labels.key` UDM field is set to `records_response_elements_security_group_rule_set_items_from_port` and `Records.responseElements.securityGroupRuleSet.items.fromPort` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.responseElements.securityGroupRuleSet.items.isEgress`	`security_result.rule_labels[records_response_elements_security_group_rule_set_items_is_egress]`	Iterate through log field `Records.responseElements.securityGroupRuleSet.items`, then the `security_result.rule_labels.key` UDM field is set to `records_response_elements_security_group_rule_set_items_is_egress` and `Records.responseElements.securityGroupRuleSet.items.isEgress` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.responseElements.securityGroupRuleSet.items.cidrIpv4`	`security_result.rule_labels[records_response_elements_security_group_rule_set_items_cidr_ipv4]`	Iterate through log field `Records.responseElements.securityGroupRuleSet.items`, then the `security_result.rule_labels.key` UDM field is set to `records_response_elements_security_group_rule_set_items_cidr_ipv4` and `Records.responseElements.securityGroupRuleSet.items.cidrIpv4` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.responseElements.securityGroupRuleSet.items.ipProtocol`	`security_result.rule_labels[records_response_elements_security_group_rule_set_items_ip_protocol]`	Iterate through log field `Records.responseElements.securityGroupRuleSet.items`, then the `security_result.rule_labels.key` UDM field is set to `records_response_elements_security_group_rule_set_items_ip_protocol` and `Records.responseElements.securityGroupRuleSet.items.ipProtocol` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.ruleNumber`	`security_result.rule_name`
`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.groupSet.item.groupName`	`security_result.rule_name`
`Records.responseElements.securityGroupRuleSet.items.securityGroupRuleId`	`security_result.rule_name`	Iterate through log field `Records.responseElements.securityGroupRuleSet.items`, then `Records.responseElements.securityGroupRuleSet.items.securityGroupRuleId` log field is mapped to the `security_result.rule_name` UDM field.
`Records.responseElements.securityGroupRuleSet.items.cidrIpv6`	`security_result.rule_labels[records_response_elements_security_group_rule_set_items_cidr_ipv6]`	Iterate through log field `Records.responseElements.securityGroupRuleSet.items`, then the `security_result.rule_labels.key` UDM field is set to `records_response_elements_security_group_rule_set_items_cidr_ipv6` and `Records.responseElements.securityGroupRuleSet.items.cidrIpv6` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.requestParameters.ipPermissions.items.groups.items.description`	`target.resource.attribute.labels[records_request_parameters_ip_permissions_items_groups_items_description]`	Iterate through log field `Records.requestParameters.ipPermissions.items`, then Iterate through log field `Records.requestParameters.ipPermissions.items.groups.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_ip_permissions_items_groups_items_description` and `Records.requestParameters.ipPermissions.items.groups.items.description` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.securityGroupRuleSet.items.referencedGroupInfo.groupId`	`security_result.rule_labels[records_response_elements_security_group_rule_set_items_referenced_group_info_group_id]`	Iterate through log field `Records.responseElements.securityGroupRuleSet.items`, then the `security_result.rule_labels.key` UDM field is set to `records_response_elements_security_group_rule_set_items_referenced_group_info_group_id` and `Records.responseElements.securityGroupRuleSet.items.referencedGroupInfo.groupId` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.responseElements.securityGroupRuleSet.items.referencedGroupInfo.userId`	`security_result.rule_labels[records_response_elements_security_group_rule_set_items_referenced_group_info_user_id]`	Iterate through log field `Records.responseElements.securityGroupRuleSet.items`, then the `security_result.rule_labels.key` UDM field is set to `records_response_elements_security_group_rule_set_items_referenced_group_info_user_id` and `Records.responseElements.securityGroupRuleSet.items.referencedGroupInfo.userId` log field is mapped to the `security_result.rule_labels.value` UDM field.
`Records.responseElements.securityGroupRuleSet.items.groupOwnerId`	`security_result.rule_author`	Iterate through log field `Records.responseElements.securityGroupRuleSet.items`, then `Records.responseElements.securityGroupRuleSet.items.groupOwnerId` log field is mapped to the `security_result.rule_author` UDM field.
`Records.requestParameters.sourceImageId`	`src.resource.product_object_id`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.sourceImageId` log field value is not empty then, `Records.requestParameters.sourceImageId` log field is mapped to the `src.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.sourceSnapshotId` log field value is not empty then, `Records.requestParameters.sourceSnapshotId` log field is mapped to the `src.resource.product_object_id` UDM field.
`Records.requestParameters.sourceSnapshotId`	`src.resource.product_object_id`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.sourceImageId` log field value is not empty then, `Records.requestParameters.sourceImageId` log field is mapped to the `src.resource.product_object_id` UDM field. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.sourceSnapshotId` log field value is not empty then, `Records.requestParameters.sourceSnapshotId` log field is mapped to the `src.resource.product_object_id` UDM field.
`Records.requestParameters.sourceRegion`	`src.location.name`
	`src.resource.resource_type`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.sourceImageId` log field value is not empty then, the `src.resource.resource_type` UDM field is set to `IMAGE`. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.sourceSnapshotId` log field value is not empty then, the `src.resource.resource_type` UDM field is set to `SNAPSHOT`.
	`src.resource.attribute.cloud.environment`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.sourceImageId` log field value is not empty then, the `src.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, if the `Records.eventName` log field value is equal to `CopySnapshot` and the `Records.requestParameters.sourceSnapshotId` log field value is not empty then, the `src.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.name`	`target.resource.name`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.requestParameters.keyName` log field value is not empty then, `Records.requestParameters.keyName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.requestParameters.groupName` log field value is not empty then, `Records.requestParameters.groupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetArn` log field value is not empty then, `Records.responseElements.subnet.subnetArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroups` then, Iterate through log field `Records.requestParameters.securityGroupSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `about.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeVpcEndpointServices` and the `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field value is not empty then, `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetAssociatedEnclaveCertificateIamRoles` and the `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field value is not empty then, `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAnalysis` and the `Records.requestParameters.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplate` and the `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplateVersion` and the `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsAccessScope` and the `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsPath` and the `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field is mapped to the `target.resource.name` UDM field.
`Records.requestParameters.keyName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.requestParameters.keyName` log field value is not empty then, `Records.requestParameters.keyName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.requestParameters.groupName` log field value is not empty then, `Records.requestParameters.groupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetArn` log field value is not empty then, `Records.responseElements.subnet.subnetArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroups` then, Iterate through log field `Records.requestParameters.securityGroupSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `about.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeVpcEndpointServices` and the `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field value is not empty then, `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetAssociatedEnclaveCertificateIamRoles` and the `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field value is not empty then, `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAnalysis` and the `Records.requestParameters.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplate` and the `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplateVersion` and the `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsAccessScope` and the `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsPath` and the `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field is mapped to the `target.resource.name` UDM field.
`Records.requestParameters.groupName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.requestParameters.keyName` log field value is not empty then, `Records.requestParameters.keyName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.requestParameters.groupName` log field value is not empty then, `Records.requestParameters.groupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetArn` log field value is not empty then, `Records.responseElements.subnet.subnetArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroups` then, Iterate through log field `Records.requestParameters.securityGroupSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `about.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeVpcEndpointServices` and the `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field value is not empty then, `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetAssociatedEnclaveCertificateIamRoles` and the `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field value is not empty then, `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAnalysis` and the `Records.requestParameters.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplate` and the `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplateVersion` and the `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsAccessScope` and the `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsPath` and the `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.subnet.subnetArn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.requestParameters.keyName` log field value is not empty then, `Records.requestParameters.keyName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.requestParameters.groupName` log field value is not empty then, `Records.requestParameters.groupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetArn` log field value is not empty then, `Records.responseElements.subnet.subnetArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroups` then, Iterate through log field `Records.requestParameters.securityGroupSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `about.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeVpcEndpointServices` and the `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field value is not empty then, `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetAssociatedEnclaveCertificateIamRoles` and the `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field value is not empty then, `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAnalysis` and the `Records.requestParameters.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplate` and the `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplateVersion` and the `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsAccessScope` and the `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsPath` and the `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.requestParameters.keyName` log field value is not empty then, `Records.requestParameters.keyName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.requestParameters.groupName` log field value is not empty then, `Records.requestParameters.groupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetArn` log field value is not empty then, `Records.responseElements.subnet.subnetArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroups` then, Iterate through log field `Records.requestParameters.securityGroupSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `about.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeVpcEndpointServices` and the `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field value is not empty then, `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetAssociatedEnclaveCertificateIamRoles` and the `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field value is not empty then, `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAnalysis` and the `Records.requestParameters.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplate` and the `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplateVersion` and the `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsAccessScope` and the `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsPath` and the `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.requestParameters.keyName` log field value is not empty then, `Records.requestParameters.keyName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.requestParameters.groupName` log field value is not empty then, `Records.requestParameters.groupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetArn` log field value is not empty then, `Records.responseElements.subnet.subnetArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroups` then, Iterate through log field `Records.requestParameters.securityGroupSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `about.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeVpcEndpointServices` and the `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field value is not empty then, `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetAssociatedEnclaveCertificateIamRoles` and the `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field value is not empty then, `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAnalysis` and the `Records.requestParameters.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplate` and the `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplateVersion` and the `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsAccessScope` and the `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsPath` and the `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.requestParameters.keyName` log field value is not empty then, `Records.requestParameters.keyName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.requestParameters.groupName` log field value is not empty then, `Records.requestParameters.groupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetArn` log field value is not empty then, `Records.responseElements.subnet.subnetArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroups` then, Iterate through log field `Records.requestParameters.securityGroupSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `about.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeVpcEndpointServices` and the `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field value is not empty then, `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetAssociatedEnclaveCertificateIamRoles` and the `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field value is not empty then, `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAnalysis` and the `Records.requestParameters.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplate` and the `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplateVersion` and the `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsAccessScope` and the `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsPath` and the `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field is mapped to the `target.resource.name` UDM field.
`Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content`	`target.resource.name`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.requestParameters.keyName` log field value is not empty then, `Records.requestParameters.keyName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.requestParameters.groupName` log field value is not empty then, `Records.requestParameters.groupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetArn` log field value is not empty then, `Records.responseElements.subnet.subnetArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroups` then, Iterate through log field `Records.requestParameters.securityGroupSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `about.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeVpcEndpointServices` and the `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field value is not empty then, `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetAssociatedEnclaveCertificateIamRoles` and the `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field value is not empty then, `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAnalysis` and the `Records.requestParameters.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplate` and the `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplateVersion` and the `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsAccessScope` and the `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsPath` and the `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field is mapped to the `target.resource.name` UDM field.
`Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.requestParameters.keyName` log field value is not empty then, `Records.requestParameters.keyName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.requestParameters.groupName` log field value is not empty then, `Records.requestParameters.groupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetArn` log field value is not empty then, `Records.responseElements.subnet.subnetArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroups` then, Iterate through log field `Records.requestParameters.securityGroupSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `about.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeVpcEndpointServices` and the `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field value is not empty then, `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetAssociatedEnclaveCertificateIamRoles` and the `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field value is not empty then, `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAnalysis` and the `Records.requestParameters.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplate` and the `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplateVersion` and the `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsAccessScope` and the `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsPath` and the `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field is mapped to the `target.resource.name` UDM field.
`Records.requestParameters.securityGroupSet.items.groupName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.requestParameters.keyName` log field value is not empty then, `Records.requestParameters.keyName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.requestParameters.groupName` log field value is not empty then, `Records.requestParameters.groupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetArn` log field value is not empty then, `Records.responseElements.subnet.subnetArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroups` then, Iterate through log field `Records.requestParameters.securityGroupSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `about.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeVpcEndpointServices` and the `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field value is not empty then, `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetAssociatedEnclaveCertificateIamRoles` and the `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field value is not empty then, `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAnalysis` and the `Records.requestParameters.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplate` and the `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplateVersion` and the `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsAccessScope` and the `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsPath` and the `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field is mapped to the `target.resource.name` UDM field.
`Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content`	`target.resource.name`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.requestParameters.keyName` log field value is not empty then, `Records.requestParameters.keyName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.requestParameters.groupName` log field value is not empty then, `Records.requestParameters.groupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetArn` log field value is not empty then, `Records.responseElements.subnet.subnetArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroups` then, Iterate through log field `Records.requestParameters.securityGroupSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `about.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeVpcEndpointServices` and the `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field value is not empty then, `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetAssociatedEnclaveCertificateIamRoles` and the `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field value is not empty then, `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAnalysis` and the `Records.requestParameters.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplate` and the `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplateVersion` and the `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsAccessScope` and the `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsPath` and the `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field is mapped to the `target.resource.name` UDM field.
`Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.requestParameters.keyName` log field value is not empty then, `Records.requestParameters.keyName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.requestParameters.groupName` log field value is not empty then, `Records.requestParameters.groupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetArn` log field value is not empty then, `Records.responseElements.subnet.subnetArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroups` then, Iterate through log field `Records.requestParameters.securityGroupSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `about.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeVpcEndpointServices` and the `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field value is not empty then, `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetAssociatedEnclaveCertificateIamRoles` and the `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field value is not empty then, `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAnalysis` and the `Records.requestParameters.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplate` and the `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplateVersion` and the `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsAccessScope` and the `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsPath` and the `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.requestParameters.keyName` log field value is not empty then, `Records.requestParameters.keyName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.requestParameters.groupName` log field value is not empty then, `Records.requestParameters.groupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetArn` log field value is not empty then, `Records.responseElements.subnet.subnetArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroups` then, Iterate through log field `Records.requestParameters.securityGroupSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `about.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeVpcEndpointServices` and the `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field value is not empty then, `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetAssociatedEnclaveCertificateIamRoles` and the `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field value is not empty then, `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAnalysis` and the `Records.requestParameters.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplate` and the `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplateVersion` and the `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsAccessScope` and the `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsPath` and the `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.requestParameters.keyName` log field value is not empty then, `Records.requestParameters.keyName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.requestParameters.groupName` log field value is not empty then, `Records.requestParameters.groupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetArn` log field value is not empty then, `Records.responseElements.subnet.subnetArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroups` then, Iterate through log field `Records.requestParameters.securityGroupSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `about.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeVpcEndpointServices` and the `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field value is not empty then, `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetAssociatedEnclaveCertificateIamRoles` and the `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field value is not empty then, `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAnalysis` and the `Records.requestParameters.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplate` and the `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplateVersion` and the `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsAccessScope` and the `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsPath` and the `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.requestParameters.keyName` log field value is not empty then, `Records.requestParameters.keyName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.requestParameters.groupName` log field value is not empty then, `Records.requestParameters.groupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetArn` log field value is not empty then, `Records.responseElements.subnet.subnetArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroups` then, Iterate through log field `Records.requestParameters.securityGroupSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `about.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeVpcEndpointServices` and the `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field value is not empty then, `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetAssociatedEnclaveCertificateIamRoles` and the `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field value is not empty then, `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAnalysis` and the `Records.requestParameters.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplate` and the `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplateVersion` and the `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsAccessScope` and the `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsPath` and the `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName`	`target.resource.name`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.requestParameters.keyName` log field value is not empty then, `Records.requestParameters.keyName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.requestParameters.groupName` log field value is not empty then, `Records.requestParameters.groupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetArn` log field value is not empty then, `Records.responseElements.subnet.subnetArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroups` then, Iterate through log field `Records.requestParameters.securityGroupSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `about.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeVpcEndpointServices` and the `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field value is not empty then, `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetAssociatedEnclaveCertificateIamRoles` and the `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field value is not empty then, `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAnalysis` and the `Records.requestParameters.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplate` and the `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplateVersion` and the `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsAccessScope` and the `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsPath` and the `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.requestParameters.keyName` log field value is not empty then, `Records.requestParameters.keyName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.requestParameters.groupName` log field value is not empty then, `Records.requestParameters.groupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetArn` log field value is not empty then, `Records.responseElements.subnet.subnetArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroups` then, Iterate through log field `Records.requestParameters.securityGroupSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `about.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeVpcEndpointServices` and the `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field value is not empty then, `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetAssociatedEnclaveCertificateIamRoles` and the `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field value is not empty then, `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAnalysis` and the `Records.requestParameters.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplate` and the `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplateVersion` and the `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsAccessScope` and the `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsPath` and the `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field is mapped to the `target.resource.name` UDM field.
`Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `CopyImage` and the `Records.requestParameters.name` log field value is not empty then, `Records.requestParameters.name` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateKeyPair` and the `Records.requestParameters.keyName` log field value is not empty then, `Records.requestParameters.keyName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSecurityGroup` and the `Records.requestParameters.groupName` log field value is not empty then, `Records.requestParameters.groupName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateSubnet` and the `Records.responseElements.subnet.subnetArn` log field value is not empty then, `Records.responseElements.subnet.subnetArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateVpcEndpointServiceConfiguration` and the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplate` and the `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DeleteLaunchTemplateVersions` and the `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field value is not empty then, `Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplates` and the `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeLaunchTemplateVersions` and the `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field value is not empty then, `Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeSecurityGroups` then, Iterate through log field `Records.requestParameters.securityGroupSet.items`, then If the `index` value is equal to `0` then, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `target.resource.name` UDM field. Else, `Records.requestParameters.securityGroupSet.items.groupName` log field is mapped to the `about.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `DescribeVpcEndpointServices` and the `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field value is not empty then, `Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.content` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `GetAssociatedEnclaveCertificateIamRoles` and the `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field value is not empty then, `Records.requestParameters.GetAssociatedEnclaveCertificateIamRolesRequest.CertificateArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAnalysis` and the `Records.requestParameters.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.networkInsightsAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `StartNetworkInsightsAccessScopeAnalysis` and the `Records.requestParameters.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field value is not empty then, `Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.networkInsightsAccessScopeAnalysisArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplate` and the `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateLaunchTemplateVersion` and the `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field value is not empty then, `Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.launchTemplateName` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsAccessScope` and the `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.networkInsightsAccessScopeArn` log field is mapped to the `target.resource.name` UDM field. Else, if the `Records.eventName` log field value is equal to `CreateNetworkInsightsPath` and the `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field value is not empty then, `Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.networkInsightsPathArn` log field is mapped to the `target.resource.name` UDM field.
`Records.requestParameters.description`	`metadata.description`
`Records.requestParameters.copyImageTags`	`target.resource.attribute.labels[records_request_parameters_copy_image_tags]`
`Records.requestParameters.encrypted`	`target.resource.attribute.labels[records_request_parameters_encrypted]`
`Records.requestParameters.masterEncryptionKeyId`	`target.resource.attribute.labels[records_request_parameters_master_encryption_key_id]`
`Records.requestParameters.presignedUrl`	`target.resource.attribute.labels[records_request_parameters_presigned_url]`
`Records.responseElements.tagSet.items.key`	`target.resource.attribute.labels[records_response_elements_tag_set_items_key]`	Iterate through log field `Records.responseElements.tagSet.items`, then `Records.responseElements.tagSet.items.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.tagSet.items.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.tagSet.items.value`	`target.resource.attribute.labels[records_response_elements_tag_set_items_key]`	Iterate through log field `Records.responseElements.tagSet.items`, then `Records.responseElements.tagSet.items.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.tagSet.items.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.customerGateway.state`	`target.resource.attribute.labels[records_response_elements_customer_gateway_state]`
`Records.responseElements.customerGateway.type`	`target.resource.attribute.labels[records_response_elements_customer_gateway_type]`
`Records.responseElements.customerGateway.bgpAsn`	`target.resource.attribute.labels[records_response_elements_customer_gateway_bgp_asn]`
`requestParameters.CreateFlowLogsRequest.TagSpecification.Tag.Value`	`target.resource.attribute.labels[request_parameters_create_flow_logs_request_tag_specification_tag_value]`	Iterate through log field `requestParameters.CreateFlowLogsRequest.TagSpecification.Tag`, then `requestParameters.CreateFlowLogsRequest.TagSpecification.Tag.Key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `requestParameters.CreateFlowLogsRequest.TagSpecification.Tag.Value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`requestParameters.CreateFlowLogsRequest.TagSpecification.Tag.Key`	`target.resource.attribute.labels[request_parameters_create_flow_logs_request_tag_specification_tag_value]`	Iterate through log field `requestParameters.CreateFlowLogsRequest.TagSpecification.Tag`, then `requestParameters.CreateFlowLogsRequest.TagSpecification.Tag.Key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `requestParameters.CreateFlowLogsRequest.TagSpecification.Tag.Value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.noReboot`	`target.resource.attribute.labels[records_request_parameters_no_reboot]`
`Records.requestParameters.keyFormat`	`target.resource.attribute.labels[records_request_parameters_key_format]`
`Records.responseElements.keyMaterial`	`target.resource.attribute.labels[records_response_elements_key_material]`
`Records.responseElements.keyFingerprint`	`target.resource.attribute.labels[records_response_elements_key_fingerprint]`
`Records.requestParameters.keyType`	`target.resource.attribute.labels[records_request_parameters_key_type]`
`Records.responseElements.CreateNatGatewayResponse.natGateway.state`	`target.resource.attribute.labels[records_response_elements_create_nat_gateway_response_nat_gateway_state]`
`Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayAddressSet.item.isPrimary`	`target.resource.attribute.labels[records_response_elements_create_nat_gateway_response_nat_gateway_nat_gateway_address_set_item_is_primary]`
`Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayAddressSet.item.status`	`target.resource.attribute.labels[records_response_elements_create_nat_gateway_response_nat_gateway_nat_gateway_address_set_item_status]`
`Records.responseElements.CreateNatGatewayResponse.natGateway.natGatewayAddressSet.item.allocationId`	`target.resource.attribute.labels[records_response_elements_create_nat_gateway_response_nat_gateway_nat_gateway_address_set_item_allocation_id]`
`Records.responseElements.CreateNatGatewayResponse.clientToken`	`target.resource.attribute.labels[records_response_elements_create_nat_gateway_response_client_token]`
`Records.responseElements.CreateNatGatewayResponse.natGateway.connectivityType`	`target.resource.attribute.labels[records_response_elements_create_nat_gateway_response_nat_gateway_connectivity_type]`
`Records.responseElements.CreateNatGatewayResponse.natGateway.createTime`	`target.resource.attribute.creation_time`
`Records.responseElements.createTime`	`target.resource.attribute.creation_time`
`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.creationTimestamp`	`target.resource.attribute.creation_time`
`Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.createTime`	`target.resource.attribute.creation_time`
`Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.createTime`	`target.resource.attribute.creation_time`
`Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.createTime`	`target.resource.attribute.creation_time`
`Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.createdDate`	`target.resource.attribute.creation_time`
`Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.createdDate`	`target.resource.attribute.creation_time`
`Records.responseElements.CreateNatGatewayResponse.natGateway.tagSet.item.key`	`target.resource.attribute.labels[records_response_elements_create_nat_gateway_response_nat_gateway_tag_set_item_key]`	Iterate through log field `Records.responseElements.CreateNatGatewayResponse.natGateway.tagSet.item`, then `Records.responseElements.CreateNatGatewayResponse.natGateway.tagSet.item.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.CreateNatGatewayResponse.natGateway.tagSet.item.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.CreateNatGatewayResponse.natGateway.tagSet.item.value`	`target.resource.attribute.labels[records_response_elements_create_nat_gateway_response_nat_gateway_tag_set_item_key]`	Iterate through log field `Records.responseElements.CreateNatGatewayResponse.natGateway.tagSet.item`, then `Records.responseElements.CreateNatGatewayResponse.natGateway.tagSet.item.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.CreateNatGatewayResponse.natGateway.tagSet.item.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`responseElements.networkAcl.isDefault`	`target.resource.attribute.labels[response_elements_network_acl_is_default]`
`Records.responseElements.CreateFleetResponse.errorSet.item.errorCode`	`security_result.action_details`	Iterate through log field `Records.responseElements.CreateFleetResponse.errorSet.item`, then `Records.responseElements.CreateFleetResponse.errorSet.item.errorCode` log field is mapped to the `security_result.action_details` UDM field. If the `Records.responseElements.CreateFleetResponse.errorSet.item.errorCode` log field value is not empty then, the `security_result.action` UDM field is set to `BLOCK`. If the `Records.responseElements.CreateFleetResponse.errorSet.item.errorCode` log field value is not empty then, `Records.responseElements.CreateFleetResponse.errorSet.item.errorCode` log field is mapped to the `security_result.action_details` UDM field and the `security_result.action` UDM field is set to `BLOCK`.
`Records.responseElements.CreateLaunchTemplateResponse.warning.errorSet.item.code`	`security_result.action_details`	Iterate through log field `Records.responseElements.CreateFleetResponse.errorSet.item`, then `Records.responseElements.CreateFleetResponse.errorSet.item.errorCode` log field is mapped to the `security_result.action_details` UDM field. If the `Records.responseElements.CreateFleetResponse.errorSet.item.errorCode` log field value is not empty then, the `security_result.action` UDM field is set to `BLOCK`. If the `Records.responseElements.CreateFleetResponse.errorSet.item.errorCode` log field value is not empty then, `Records.responseElements.CreateFleetResponse.errorSet.item.errorCode` log field is mapped to the `security_result.action_details` UDM field and the `security_result.action` UDM field is set to `BLOCK`.
`Records.requestParameters.ruleAction`	`security_result.action_details`
	`security_result.action`	If the `Records.eventName` log field value is equal to `CreateNetworkAclEntry` and if the `Records.requestParameters.ruleAction` log field value is equal to `allow` then, the `security_result.action` UDM field is set to `ALLOW`. Else, if the `Records.requestParameters.ruleAction` log field value is equal to `deny` then, the `security_result.action` UDM field is set to `BLOCK`.
`Records.requestParameters.cidrBlock`	`network.ip_subnet_range`
`Records.requestParameters.ipv6CidrBlock`	`network.ip_subnet_range`
`Records.responseElements.subnet.cidrBlock`	`network.ip_subnet_range`
`Records.requestParameters.egress`	`security_result.rule_labels[records_request_parameters_egress]`
`Records.requestParameters.portRange.from`	`security_result.rule_labels[records_request_parameters_port_range_from]`
`Records.requestParameters.portRange.to`	`security_result.rule_labels[records_request_parameters_port_range_to]`
`Records.responseElements.networkInterface.availabilityZone`	`target.resource.attribute.cloud.availability_zone`
`Records.requestParameters.availabilityZone`	`target.resource.attribute.cloud.availability_zone`
`Records.responseElements.subnet.availabilityZone`	`target.resource.attribute.cloud.availability_zone`
`Records.responseElements.zone`	`target.resource.attribute.cloud.availability_zone`
`Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.availabilityZoneSet.item`	`target.resource.attribute.cloud.availability_zone`
`Records.responseElements.networkInterface.interfaceType`	`target.resource.attribute.labels[records_response_elements_network_interface_interface_type]`
`Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.baseEndpointDnsNameSet.item`	`target.domain.name`	If the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.privateDnsName` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.privateDnsName` log field is mapped to the `target.domain.name` UDM field. Else, if the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.baseEndpointDnsNameSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.baseEndpointDnsNameSet.item` log field is mapped to the `target.domain.name` UDM field.
`Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.privateDnsName`	`target.domain.name`	If the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.privateDnsName` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.privateDnsName` log field is mapped to the `target.domain.name` UDM field. Else, if the `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.baseEndpointDnsNameSet.item` log field value is not empty then, `Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.baseEndpointDnsNameSet.item` log field is mapped to the `target.domain.name` UDM field.
`Records.responseElements.networkInterface.privateDnsName`	`target.domain.name`
`Records.responseElements.instancesSet.items.privateDnsName`	`target.domain.name`
`Records.responseElements.networkInterface.macAddress`	`target.mac`
`Records.responseElements.networkInterface.privateIpAddressesSet.item.primary`	`target.resource.attribute.labels[records_response_elements_network_interface_private_ip_addresses_set_item_primary]`	Iterate through log field `Records.responseElements.networkInterface.privateIpAddressesSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_network_interface_private_ip_addresses_set_item_primary` and `Records.responseElements.networkInterface.privateIpAddressesSet.item.primary` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.networkInterface.privateIpAddressesSet.item.privateIpAddress`	`target.resource.attribute.labels[records_response_elements_network_interface_private_ip_addresses_set_item_private_ip_address]`	Iterate through log field `Records.responseElements.networkInterface.privateIpAddressesSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_network_interface_private_ip_addresses_set_item_private_ip_address` and `Records.responseElements.networkInterface.privateIpAddressesSet.item.privateIpAddress` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.networkInterface.privateIpAddressesSet.item.privateDnsName`	`target.resource.attribute.labels[records_response_elements_network_interface_private_ip_addresses_set_item_private_dns_name]`	Iterate through log field `Records.responseElements.networkInterface.privateIpAddressesSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_network_interface_private_ip_addresses_set_item_private_dns_name` and `Records.responseElements.networkInterface.privateIpAddressesSet.item.privateDnsName` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.networkInterface.requesterId`	`target.resource.attribute.labels[records_response_elements_network_interface_requester_id]`
`Records.responseElements.networkInterface.requesterManaged`	`target.resource.attribute.labels[records_response_elements_network_interface_requester_managed]`
`Records.responseElements.networkInterface.sourceDestCheck`	`target.resource.attribute.labels[records_response_elements_network_interface_source_dest_check]`
`Records.responseElements.networkInterface.status`	`target.resource.attribute.labels[records_response_elements_network_interface_status]`
`Records.responseElements.networkInterface.tagSet.items.key`	`target.resource.attribute.labels[records_response_elements_network_interface_tag_set_items_key]`	Iterate through log field `Records.responseElements.networkInterface.tagSet.items`, then `Records.responseElements.networkInterface.tagSet.items.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.networkInterface.tagSet.items.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.networkInterface.tagSet.items.value`	`target.resource.attribute.labels[records_response_elements_network_interface_tag_set_items_key]`	Iterate through log field `Records.responseElements.networkInterface.tagSet.items`, then `Records.responseElements.networkInterface.tagSet.items.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.networkInterface.tagSet.items.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.networkInterface.denyAllIgwTraffic`	`target.resource.attribute.labels[records_response_elements_network_interface_deny_all_igw_traffic]`
`Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.permission`	`target.resource.attribute.permissions.description`
`Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.networkInterfacePermissionId`	`target.resource.attribute.permissions.name`
`Records.responseElements.ModifyVpcEndpointServicePermissionsResponse.addedPrincipalSet.item.servicePermissionId`	`target.resource.attribute.permissions.name`
`Records.responseElements.CreateNetworkInterfacePermissionResponse.interfacePermission.permissionState.state`	`target.resource.attribute.labels[records_response_elements_create_network_interface_permission_response_interface_permission_permission_state_state]`
`Records.requestParameters.natGatewayId`	`target.resource.attribute.labels[records_request_parameters_nat_gateway_id]`
`Records.requestParameters.destinationCidrBlock`	`target.resource.attribute.labels[records_request_parameters_destination_cidr_block]`
`Records.requestParameters.gatewayId`	`target.resource.attribute.labels[records_request_parameters_gateway_id]`
`Records.requestParameters.transitGatewayId`	`target.resource.attribute.labels[records_request_parameters_transit_gateway_id]`
`Records.requestParameters.groupDescription`	`target.resource.attribute.labels[records_request_parameters_group_description]`
`Records.responseElements.routeTable.routeSet.items.destinationCidrBlock`	`target.resource.attribute.labels[records_response_elements_route_table_route_set_items_destination_cidr_block]`	Iterate through log field `Records.responseElements.routeTable.routeSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_route_table_route_set_items_destination_cidr_block` and `Records.responseElements.routeTable.routeSet.items.destinationCidrBlock` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.routeTable.routeSet.items.origin`	`target.resource.attribute.labels[records_response_elements_route_table_route_set_items_origin]`	Iterate through log field `Records.responseElements.routeTable.routeSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_route_table_route_set_items_origin` and `Records.responseElements.routeTable.routeSet.items.origin` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.routeTable.routeSet.items.state`	`target.resource.attribute.labels[records_response_elements_route_table_route_set_items_state]`	Iterate through log field `Records.responseElements.routeTable.routeSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_route_table_route_set_items_state` and `Records.responseElements.routeTable.routeSet.items.state` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.volumeSize`	`target.resource_ancestors.attribute.labels[records_response_elements_volume_size]`
`Records.responseElements.encrypted`	`target.resource.attribute.labels[records_response_elements_encrypted]`
`Records.responseElements.startTime`	`target.resource.attribute.labels[records_response_elements_start_time]`
`Records.responseElements.subnet.assignIpv6AddressOnCreation`	`target.resource.attribute.labels[records_response_elements_subnet_assign_ipv6address_on_creation]`
`Records.responseElements.subnet.availabilityZoneId`	`target.resource.attribute.labels[records_response_elements_subnet_availability_zone_id]`
`Records.responseElements.subnet.availableIpAddressCount`	`target.resource.attribute.labels[records_response_elements_subnet_available_ip_address_count]`
`Records.responseElements.subnet.defaultForAz`	`target.resource.attribute.labels[records_response_elements_subnet_default_for_az]`
`Records.responseElements.subnet.enableDns64`	`target.resource.attribute.labels[records_response_elements_subnet_enable_dns64]`
`Records.responseElements.subnet.ipv6Native`	`target.resource.attribute.labels[records_response_elements_subnet_ipv6native]`
`Records.responseElements.subnet.mapPublicIpOnLaunch`	`target.resource.attribute.labels[records_response_elements_subnet_map_public_ip_on_launch]`
`Records.responseElements.subnet.privateDnsNameOptionsOnLaunch.enableResourceNameDnsARecord`	`target.resource.attribute.labels[records_response_elements_subnet_private_dns_name_options_on_launch_enable_resource_name_dns_arecord]`
`Records.responseElements.subnet.privateDnsNameOptionsOnLaunch.enableResourceNameDnsAAAARecord`	`target.resource.attribute.labels[records_response_elements_subnet_private_dns_name_options_on_launch_enable_resource_name_dns_aaaarecord]`
`Records.responseElements.subnet.privateDnsNameOptionsOnLaunch.hostnameType`	`target.resource.attribute.labels[records_response_elements_subnet_private_dns_name_options_on_launch_hostname_type]`
`Records.responseElements.subnet.state`	`target.resource.attribute.labels[records_response_elements_subnet_state]`
`Records.requestParameters.tagSet.items.key`	`target.resource.attribute.labels[records_request_parameters_tag_set_items_key]`	Iterate through log field `Records.requestParameters.tagSet.items`, then `Records.requestParameters.tagSet.items.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.tagSet.items.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.tagSet.items.value`	`target.resource.attribute.labels[records_request_parameters_tag_set_items_key]`	Iterate through log field `Records.requestParameters.tagSet.items`, then `Records.requestParameters.tagSet.items.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.tagSet.items.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.resourcesSet.items.resourceId`	`target.resource.attribute.labels[records_request_parameters_resources_set_items_resource_id]`	Iterate through log field `Records.requestParameters.resourcesSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_resources_set_items_resource_id` and `Records.requestParameters.resourcesSet.items.resourceId` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.volumeType`	`target.resource.attribute.labels[records_response_elements_volume_type]`
`Records.responseElements.size`	`target.resource.attribute.labels[records_response_elements_size]`
`Records.responseElements.multiAttachEnabled`	`target.resource.attribute.labels[records_response_elements_multi_attach_enabled]`
`Records.responseElements.iops`	`target.resource.attribute.labels[records_response_elements_iops]`
`Records.requestParameters.clientToken`	`target.resource.attribute.labels[records_request_parameters_client_token]`
`Records.responseElements.vpc.state`	`target.resource.attribute.labels[records_response_elements_vpc_state]`
`Records.responseElements.vpc.isDefault`	`target.resource.attribute.labels[records_response_elements_vpc_is_default]`
`Records.responseElements.vpc.instanceTenancy`	`target.resource.attribute.labels[records_response_elements_vpc_instance_tenancy]`
`Records.responseElements.vpc.dhcpOptionsId`	`target.resource.attribute.labels[records_response_elements_vpc_dhcp_options_id]`
`Records.responseElements.vpc.cidrBlockAssociationSet.items.associationId`	`target.resource.attribute.labels[records_response_elements_vpc_cidr_block_association_set_items_association_id]`	Iterate through log field `Records.responseElements.vpc.cidrBlockAssociationSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpc_cidr_block_association_set_items_association_id` and `Records.responseElements.vpc.cidrBlockAssociationSet.items.associationId` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpc.cidrBlockAssociationSet.items.cidrBlockState.state`	`target.resource.attribute.labels[records_response_elements_vpc_cidr_block_association_set_items_cidr_block_state_state]`	Iterate through log field `Records.responseElements.vpc.cidrBlockAssociationSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpc_cidr_block_association_set_items_cidr_block` and `Records.responseElements.vpc.cidrBlockAssociationSet.items.cidrBlockState.state` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpc.cidrBlockAssociationSet.items.cidrBlock`	`target.resource.attribute.labels[records_response_elements_vpc_cidr_block_association_set_items_cidr_block]`	Iterate through log field `Records.responseElements.vpc.cidrBlockAssociationSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpc_cidr_block_association_set_items_association_id` and `Records.responseElements.vpc.cidrBlockAssociationSet.items.cidrBlock` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.vpcEndpointType`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_response_vpc_endpoint_vpc_endpoint_type]`
`Records.responseElements.CreateVpcEndpointResponse.requestId`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_response_request_id]`
`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.dnsEntrySet.item.dnsName`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_response_vpc_endpoint_dns_entry_set_item_dns_name]`	Iterate through log field `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.dnsEntrySet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `res_create_vpc_endpoint_response_vpc_endpoint_dns_entry_set_item_dns_name` and `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.dnsEntrySet.item.dnsName` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.dnsEntrySet.item.hostedZoneId`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_response_vpc_endpoint_dns_entry_set_item_hosted_zone_id]`	Iterate through log field `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.dnsEntrySet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `res_create_vpc_endpoint_response_vpc_endpoint_dns_entry_set_item_hosted_zone_id` and `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.dnsEntrySet.item.hostedZoneId` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateVpcEndpointRequest.DnsOptions.DnsRecordIpType`	`target.resource.attribute.labels[records_request_parameters_create_vpc_endpoint_request_dns_options_dns_record_ip_type]`
`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.state`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_response_vpc_endpoint_state]`
`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.serviceName`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_response_vpc_endpoint_service_name]`
`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.requesterManaged`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_response_vpc_endpoint_requester_managed]`
`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.privateDnsEnabled`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_response_vpc_endpoint_private_dns_enabled]`
`Records.requestParameters.CreateVpcEndpointRequest.SubnetId.content`	`target.resource_ancestors.attribute.labels[records_request_parameters_create_vpc_endpoint_request_subnet_id_content]`
`Records.requestParameters.CreateVpcEndpointRequest.SubnetId.tag`	`target.resource_ancestors.attribute.labels[records_request_parameters_create_vpc_endpoint_request_subnet_id_tag]`
`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.policyDocument`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_response_vpc_endpoint_policy_document]`
`Records.responseElements.CreateVpcEndpointResponse.clientToken`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_response_client_token]`
`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.ipAddressType`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_response_vpc_endpoint_ip_address_type]`
`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.routeTableIdSet.item`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_response_vpc_endpoint_route_table_id_set_item]`
`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.networkInterfaceIdSet.item`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_response_vpc_endpoint_network_interface_id_set_item]`
`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.tagSet.item.key`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_response_vpc_endpoint_tag_set_item_key]`	Iterate through log field `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.tagSet.item`, then `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.tagSet.item.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.tagSet.item.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.tagSet.item.value`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_response_vpc_endpoint_tag_set_item_key]`	Iterate through log field `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.tagSet.item`, then `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.tagSet.item.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.CreateVpcEndpointResponse.vpcEndpoint.tagSet.item.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateVpcEndpointRequest.SecurityGroupId.tag`	`security_result.detection_fields[records_request_parameters_create_vpc_endpoint_request_security_group_id_tag]`
`Records.requestParameters.CreateVpcEndpointRequest.SecurityGroupId.content`	`security_result.detection_fields[records_request_parameters_create_vpc_endpoint_request_security_group_id_content]`
`Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceState`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_service_configuration_response_service_configuration_service_state]`
`Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.serviceType.item.serviceType`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_service_configuration_response_service_configuration_service_type_item_service_type]`
`Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.requestId`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_service_configuration_response_request_id]`
`Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.acceptanceRequired`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_service_configuration_response_service_configuration_acceptance_required]`
`Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.managesVpcEndpoints`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_service_configuration_response_service_configuration_manages_vpc_endpoints]`
`Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.privateDnsNameConfiguration.state`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_service_configuration_response_service_configuration_private_dns_name_configuration_state]`
`Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.privateDnsNameConfiguration.value`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_service_configuration_response_service_configuration_private_dns_name_configuration_value]`
`Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.privateDnsNameConfiguration.name`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_service_configuration_response_service_configuration_private_dns_name_configuration_name]`
`Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.privateDnsNameConfiguration.type`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_service_configuration_response_service_configuration_private_dns_name_configuration_type]`
`Records.responseElements.CreateVpcEndpointServiceConfigurationResponse.serviceConfiguration.supportedIpAddressTypeSet.item`	`target.resource.attribute.labels[records_response_elements_create_vpc_endpoint_service_configuration_response_service_configuration_supported_ip_address_type_set_item]`
`Records.requestParameters.CreateVpcEndpointServiceConfigurationRequest.NetworkLoadBalancerArn.tag`	`target.resource_ancestors.attribute.labels[records_request_parameters_create_vpc_endpoint_service_configuration_request_network_load_balancer_arn_tag]`
`Records.requestParameters.CreateVpcEndpointServiceConfigurationRequest.NetworkLoadBalancerArn.content`	`target.resource_ancestors.attribute.labels[records_request_parameters_create_vpc_endpoint_service_configuration_request_network_load_balancer_arn_content]`
`Records.requestParameters.vpnConnectionId`	`additional.fields[vpn_connection_id]`
`Records.responseElements.vpnGateway.type`	`target.resource.attribute.labels[records_response_elements_vpn_gateway_type]`
`Records.responseElements.vpnGateway.state`	`target.resource.attribute.labels[records_response_elements_vpn_gateway_state]`
`Records.responseElements.vpnGateway.amazonSideAsn`	`target.resource.attribute.labels[records_response_elements_vpn_gateway_amazon_side_asn]`
`Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.createdBy`	`target.resource.attribute.labels[records_response_elements_delete_launch_template_response_launch_template_created_by]`
`Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.defaultVersionNumber`	`target.resource.attribute.labels[records_response_elements_delete_launch_template_response_launch_template_default_version_number]`
`Records.responseElements.DeleteLaunchTemplateResponse.launchTemplate.latestVersionNumber`	`target.resource.attribute.labels[records_response_elements_delete_launch_template_response_launch_template_latest_version_number]`
`Records.responseElements.DeleteLaunchTemplateVersionsResponse.requestId`	`target.resource.attribute.labels[records_response_elements_delete_launch_template_versions_response_request_id]`
`Records.responseElements.DeleteLaunchTemplateVersionsResponse.successfullyDeletedLaunchTemplateVersionSet.item.versionNumber`	`target.resource.attribute.labels[records_response_elements_delete_launch_template_versions_response_successfully_deleted_launch_template_version_set_item_version_number]`
`Records.requestParameters.DeleteLaunchTemplateVersionsRequest.LaunchTemplateVersion.content`	`target.resource.attribute.labels[records_request_parameters_delete_launch_template_versions_request_launch_template_version_content]`
`Records.requestParameters.DeleteLaunchTemplateVersionsRequest.LaunchTemplateVersion.tag`	`target.resource.attribute.labels[records_request_parameters_delete_launch_template_versions_request_launch_template_version_tag]`
`Records.responseElements.DeleteNatGatewayResponse.requestId`	`target.resource.attribute.labels[records_response_elements_delete_nat_gateway_response_request_id]`
`Records.responseElements.DeleteNetworkInsightsAccessScopeResponse.requestId`	`target.resource.attribute.labels[records_response_elements_delete_network_insights_access_scope_response_request_id]`
`Records.responseElements.DeleteNetworkInsightsAccessScopeAnalysisResponse.requestId`	`target.resource.attribute.labels[records_response_elements_delete_network_insights_access_scope_analysis_response_request_id]`
`Records.requestParameters.force`	`target.resource.attribute.labels[records_request_parameters_force]`
`Records.requestParameters.reportVolumeFailure`	`target.resource.attribute.labels[records_request_parameters_report_volume_failure]`
`Records.requestParameters.DeleteVpcEndpointsRequest.VpcEndpointId.tag`	`target.resource.attribute.labels[records_request_parameters_delete_vpc_endpoints_request_vpc_endpoint_id_tag]`
`Records.responseElements.DeleteVpcEndpointsResponse.requestId`	`target.resource.attribute.labels[records_response_elements_delete_vpc_endpoints_response_request_id]`
`Records.requestParameters.DeleteVpcEndpointServiceConfigurationsRequest.ServiceId.tag`	`target.resource.attribute.labels[records_request_parameters_delete_vpc_endpoint_service_configurations_request_service_id_tag]`
`Records.responseElements.DeleteVpcEndpointServiceConfigurationsResponse.requestId`	`target.resource.attribute.labels[records_response_elements_delete_vpc_endpoint_service_configurations_response_request_id]`
`Records.requestParameters.accountAttributeNameSet.items.attributeName`	`target.resource.attribute.labels[records_request_parameters_account_attribute_name_set_items_attribute_name]`	Iterate through log field `Records.requestParameters.accountAttributeNameSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_account_attribute_name_set_items_attribute_name` and `Records.requestParameters.accountAttributeNameSet.items.attributeName` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.filterSet.items.name`	`target.resource.attribute.labels[records_request_parameters_filter_set_items_name]`	Iterate through log field `Records.requestParameters.filterSet.items.valueSet.items`, then `Records.requestParameters.filterSet.items.name` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.filterSet.items.valueSet.items.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.filterSet.items.valueSet.items.value`	`target.resource.attribute.labels[records_request_parameters_filter_set_items_name]`	Iterate through log field `Records.requestParameters.filterSet.items.valueSet.items`, then `Records.requestParameters.filterSet.items.name` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.filterSet.items.valueSet.items.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeAddressesAttributeRequest.AllocationId.tag`	`target.resource.attribute.labels[records_request_parameters_describe_addresses_attribute_request_allocation_id_tag]`
`Records.requestParameters.DescribeAddressesAttributeRequest.Attribute`	`target.resource.attribute.labels[records_request_parameters_describe_addresses_attribute_request_attribute]`
`Records.requestParameters.DescribeAddressesAttributeRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_addresses_attribute_request_max_results]`
`Records.requestParameters.DescribeAddressTransfersRequest.AllocationId.tag`	`target.resource.attribute.labels[records_request_parameters_describe_address_transfers_request_allocation_id_tag]`
`Records.requestParameters.DescribeAddressTransfersRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_address_transfers_request_max_results]`
`Records.requestParameters.availabilityZoneIdSet.items.zoneId`	`target.resource.attribute.labels[records_request_parameters_availability_zone_id_set_items_zone_id]`	Iterate through log field `Records.requestParameters.availabilityZoneIdSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_availability_zone_id_set_items_zone_id` and `Records.requestParameters.availabilityZoneIdSet.items.zoneId` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.availabilityZoneSet.items.zoneName`	`target.resource.attribute.labels[records_request_parameters_availability_zone_set_items_zone_name]`	Iterate through log field `Records.requestParameters.availabilityZoneSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_availability_zone_set_items_zone_name` and `Records.requestParameters.availabilityZoneSet.items.zoneName` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.allAvailabilityZones`	`target.resource.attribute.labels[records_request_parameters_all_availability_zones]`
`Records.requestParameters.DescribeByoipCidrsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_byoip_cidrs_request_max_results]`
`Records.requestParameters.DescribeCapacityReservationFleetsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_capacity_reservation_fleets_request_max_results]`
`Records.requestParameters.DescribeCapacityReservationsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_capacity_reservations_request_max_results]`
`Records.requestParameters.DescribeCapacityReservationsRequest.Filter.Name`	`target.resource.attribute.labels[records_request_parameters_describe_capacity_reservations_request_filter_name]`
`Records.requestParameters.DescribeCapacityReservationsRequest.Filter.Value.content`	`target.resource.attribute.labels[records_request_parameters_describe_capacity_reservations_request_filter_value_content]`
`Records.requestParameters.DescribeCapacityReservationsRequest.Filter.Value.tag`	`target.resource.attribute.labels[records_request_parameters_describe_capacity_reservations_request_filter_value_tag]`
`Records.requestParameters.DescribeCapacityReservationsRequest.Filter.tag`	`target.resource.attribute.labels[records_request_parameters_describe_capacity_reservations_request_filter_tag]`
`Records.requestParameters.DescribeCarrierGatewaysRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_carrier_gateways_request_max_results]`
`Records.requestParameters.DescribeClientVpnEndpointsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_client_vpn_endpoints_request_max_results]`
`Records.requestParameters.DescribeCoipPoolsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_coip_pools_request_max_results]`
`Records.requestParameters.dhcpOptionsSet.items.dhcpOptionsId`	`target.resource.attribute.labels[records_request_parameters_dhcp_options_set_items_dhcp_options_id]`	Iterate through log field `Records.requestParameters.dhcpOptionsSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_dhcp_options_set_items_dhcp_options_id` and `Records.requestParameters.dhcpOptionsSet.items.dhcpOptionsId` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.maxResults`	`target.resource.attribute.labels[records_request_parameters_max_results]`
`Records.requestParameters.DescribeEgressOnlyInternetGatewaysRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_egress_only_internet_gateways_request_max_results]`
`Records.requestParameters.DescribeElasticGpusRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_elastic_gpus_request_max_results]`
`Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.tag`	`target.resource.attribute.labels[records_request_parameters_describe_fast_snapshot_restores_request_filter_tag]`
`Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Value.tag`	`target.resource.attribute.labels[records_request_parameters_describe_fast_snapshot_restores_request_filter_value_tag]`
`Records.requestParameters.DescribeFastSnapshotRestoresRequest.Filter.Name`	`target.resource.attribute.labels[records_request_parameters_describe_fast_snapshot_restores_request_filter_name]`
`Records.requestParameters.DescribeFleetsRequest.FleetId.tag`	`target.resource.attribute.labels[records_request_parameters_describe_fleets_request_fleet_id_tag]`
`Records.requestParameters.DescribeFleetsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_fleets_request_max_results]`
`Records.requestParameters.DescribeFlowLogsRequest.Filter.Name`	`target.resource.attribute.labels[records_request_parameters_describe_flow_logs_request_filter_name]`
`Records.requestParameters.DescribeFlowLogsRequest.Filter.Value.content`	`target.resource.attribute.labels[records_request_parameters_describe_flow_logs_request_filter_value_content]`	Iterate through log field `Records.requestParameters.DescribeFlowLogsRequest.Filter.Value`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_describe_flow_logs_request_filter_value_content` and `Records.requestParameters.DescribeFlowLogsRequest.Filter.Value.content` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeFlowLogsRequest.Filter.tag`	`target.resource.attribute.labels[records_request_parameters_describe_flow_logs_request_filter_tag]`
`Records.requestParameters.DescribeFlowLogsRequest.Filter.Value.tag`	`target.resource.attribute.labels[records_request_parameters_describe_flow_logs_request_filter_value_tag]`	Iterate through log field `Records.requestParameters.DescribeFlowLogsRequest.Filter.Value`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_describe_flow_logs_request_filter_value_tag` and `Records.requestParameters.DescribeFlowLogsRequest.Filter.Value.tag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeFlowLogsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_flow_logs_request_max_results]`
`Records.requestParameters.DescribeFlowLogsRequest.FlowLogId.tag`	`target.resource.attribute.labels[records_request_parameters_describe_flow_logs_request_flow_log_id_tag]`
`Records.requestParameters.DescribeFpgaImagesRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_fpga_images_request_max_results]`
`Records.requestParameters.DescribeFpgaImagesRequest.Owner.content`	`target.resource.attribute.labels[records_request_parameters_describe_fpga_images_request_owner_content]`
`Records.requestParameters.DescribeFpgaImagesRequest.Owner.tag`	`target.resource.attribute.labels[records_request_parameters_describe_fpga_images_request_owner_tag]`
`Records.requestParameters.DescribeHostReservationsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_host_reservations_request_max_results]`
`Records.requestParameters.DescribeHostsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_hosts_request_max_results]`
`Records.requestParameters.DescribeIamInstanceProfileAssociationsRequest.Filter.tag`	`target.resource.attribute.labels[records_request_parameters_describe_iam_instance_profile_associations_request_filter_tag]`
`Records.requestParameters.DescribeIamInstanceProfileAssociationsRequest.Filter.Value.tag`	`target.resource.attribute.labels[records_request_parameters_describe_iam_instance_profile_associations_request_filter_value_tag]`
`Records.requestParameters.DescribeIamInstanceProfileAssociationsRequest.Filter.Name`	`target.resource.attribute.labels[records_request_parameters_describe_iam_instance_profile_associations_request_filter_name]`
`Records.requestParameters.DescribeIamInstanceProfileAssociationsRequest.Filter.Value.content`	`target.resource.attribute.labels[records_request_parameters_describe_iam_instance_profile_associations_request_filter_value_content]`
`Records.requestParameters.attributeType`	`target.resource.attribute.labels[records_request_parameters_attribute_type]`
`Records.requestParameters.executableBySet.items.user`	`target.resource.attribute.labels[records_request_parameters_executable_by_set_items_user]`	Iterate through log field `Records.requestParameters.executableBySet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_executable_by_set_items_user` and `Records.requestParameters.executableBySet.items.user` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ownersSet.items.owner`	`target.resource.attribute.labels[records_request_parameters_owners_set_items_owner]`	Iterate through log field `Records.requestParameters.ownersSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_owners_set_items_owner` and `Records.requestParameters.ownersSet.items.owner` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.includeDeprecated`	`target.resource.attribute.labels[records_request_parameters_include_deprecated]`
`Records.requestParameters.nextToken`	`target.resource.attribute.labels[records_request_parameters_next_token]`
`Records.requestParameters.attribute`	`target.resource.attribute.labels[records_request_parameters_attribute]`
`Records.requestParameters.DescribeInstanceConnectEndpointsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_instance_connect_endpoints_request_max_results]`
`Records.requestParameters.DescribeInstanceCreditSpecificationsRequest.InstanceId.tag`	`target.resource.attribute.labels[records_request_parameters_describe_instance_credit_specifications_request_instance_id_tag]`
`Records.requestParameters.DescribeInstanceEventWindowsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_instance_event_windows_request_max_results]`
`Records.requestParameters.DescribeIpamPoolsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_ipam_pools_request_max_results]`
`Records.requestParameters.DescribeIpamResourceDiscoveriesRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_ipam_resource_discoveries_request_max_results]`
`Records.requestParameters.DescribeIpamResourceDiscoveryAssociationsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_ipam_resource_discovery_associations_request_max_results]`
`Records.requestParameters.DescribeIpamScopesRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_ipam_scopes_request_max_results]`
`Records.requestParameters.DescribeIpamsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_ipams_request_max_results]`
`Records.requestParameters.includeAllInstances`	`target.resource.attribute.labels[records_request_parameters_include_all_instances]`
`Records.requestParameters.DescribeInstanceTypeOfferingsRequest.LocationType`	`target.resource.attribute.labels[records_request_parameters_describe_instance_type_offerings_request_location_type]`
`Records.requestParameters.DescribeInstanceTypeOfferingsRequest.Filter.Name`	`target.resource.attribute.labels[records_request_parameters_describe_instance_type_offerings_request_filter_name]`	Iterate through log field `Records.requestParameters.DescribeInstanceTypeOfferingsRequest.Filter`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_describe_instance_type_offerings_request_filter_name` and `Records.requestParameters.DescribeInstanceTypeOfferingsRequest.Filter.Name` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeInstanceTypeOfferingsRequest.Filter.Value.content`	`target.resource.attribute.labels[records_request_parameters_describe_instance_type_offerings_request_filter_value_content]`	Iterate through log field `Records.requestParameters.DescribeInstanceTypeOfferingsRequest.Filter`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_describe_instance_type_offerings_request_filter_value_content` and `Records.requestParameters.DescribeInstanceTypeOfferingsRequest.Filter.Value.content` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeInstanceTypeOfferingsRequest.Filter.Value.tag`	`target.resource.attribute.labels[records_request_parameters_describe_instance_type_offerings_request_filter_value_tag]`	Iterate through log field `Records.requestParameters.DescribeInstanceTypeOfferingsRequest.Filter`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_describe_instance_type_offerings_request_filter_value_tag` and `Records.requestParameters.DescribeInstanceTypeOfferingsRequest.Filter.Value.tag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeInstanceTypeOfferingsRequest.Filter.tag`	`target.resource.attribute.labels[records_request_parameters_describe_instance_type_offerings_request_filter_tag]`	Iterate through log field `Records.requestParameters.DescribeInstanceTypeOfferingsRequest.Filter`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_describe_instance_type_offerings_request_filter_tag` and `Records.requestParameters.DescribeInstanceTypeOfferingsRequest.Filter.tag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeInstanceTypeOfferingsRequest.NextToken`	`target.resource.attribute.labels[records_request_parameters_describe_instance_type_offerings_request_next_token]`
`Records.requestParameters.DescribeInstanceTypeOfferingsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_instance_type_offerings_request_max_results]`
`Records.requestParameters.DescribeInstanceTypesRequest.NextToken`	`target.resource.attribute.labels[records_request_parameters_describe_instance_types_request_next_token]`
`Records.requestParameters.DescribeInstanceTypesRequest.Filter.Name`	`target.resource.attribute.labels[records_request_parameters_describe_instance_types_request_filter_name]`	Iterate through log field `Records.requestParameters.DescribeInstanceTypesRequest.Filter`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_describe_instance_types_request_filter_name` and `Records.requestParameters.DescribeInstanceTypesRequest.Filter.Name` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeInstanceTypesRequest.Filter.Value.content`	`target.resource.attribute.labels[records_request_parameters_describe_instance_types_request_filter_value_content]`	Iterate through log field `Records.requestParameters.DescribeInstanceTypesRequest.Filter`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_describe_instance_types_request_filter_value_content` and `Records.requestParameters.DescribeInstanceTypesRequest.Filter.Value.content` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeInstanceTypesRequest.Filter.Value.tag`	`target.resource.attribute.labels[records_request_parameters_describe_instance_types_request_filter_value_tag]`	Iterate through log field `Records.requestParameters.DescribeInstanceTypesRequest.Filter`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_describe_instance_types_request_filter_value_tag` and `Records.requestParameters.DescribeInstanceTypesRequest.Filter.Value.tag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeInstanceTypesRequest.Filter.tag`	`target.resource.attribute.labels[records_request_parameters_describe_instance_types_request_filter_tag]`	Iterate through log field `Records.requestParameters.DescribeInstanceTypesRequest.Filter`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_describe_instance_types_request_filter_tag` and `Records.requestParameters.DescribeInstanceTypesRequest.Filter.tag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeInstanceTypesRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_instance_types_request_max_results]`
`Records.requestParameters.DescribeInstanceTypesRequest.InstanceType.content`	`target.resource.attribute.labels[records_request_parameters_describe_instance_types_request_instance_type_content]`
`Records.requestParameters.DescribeInstanceTypesRequest.InstanceType.tag`	`target.resource.attribute.labels[records_request_parameters_describe_instance_types_request_instance_type_tag]`
`Records.requestParameters.includePublicKey`	`target.resource.attribute.labels[records_request_parameters_include_public_key]`
`Records.requestParameters.keySet.items.keyName`	`target.resource.attribute.labels[records_request_parameters_key_set_items_key_name]`	Iterate through log field `Records.requestParameters.keySet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_key_set_items_key_name` and `Records.requestParameters.keySet.items.keyName` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateId.tag`	`target.resource.attribute.labels[records_request_parameters_describe_launch_templates_request_launch_template_id_tag]`
`Records.requestParameters.DescribeLaunchTemplatesRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_launch_templates_request_max_results]`
`Records.requestParameters.DescribeLaunchTemplatesRequest.LaunchTemplateName.tag`	`target.resource.attribute.labels[records_request_parameters_describe_launch_templates_request_launch_template_name_tag]`
`Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateVersion.content`	`target.resource.attribute.labels[records_request_parameters_describe_launch_template_versions_request_launch_template_version_content]`
`Records.requestParameters.DescribeLaunchTemplateVersionsRequest.LaunchTemplateVersion.tag`	`target.resource.attribute.labels[records_request_parameters_describe_launch_template_versions_request_launch_template_version_tag]`
`Records.requestParameters.DescribeLaunchTemplateVersionsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_launch_template_versions_request_max_results]`
`Records.requestParameters.DescribeLocalGatewayRouteTablesRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_local_gateway_route_tables_request_max_results]`
`Records.requestParameters.DescribeLockedSnapshotsRequest.SnapshotId.tag`	`target.resource.attribute.labels[records_request_parameters_describe_locked_snapshots_request_snapshot_id_tag]`
`Records.requestParameters.DescribeManagedPrefixListsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_managed_prefix_lists_request_max_results]`
`Records.requestParameters.DescribeManagedPrefixListsRequest.PrefixListId.tag`	`target.resource.attribute.labels[records_request_parameters_describe_managed_prefix_lists_request_prefix_list_id_tag]`
`Records.requestParameters.DescribeNatGatewaysRequest.Filter.Name`	`target.resource.attribute.labels[records_request_parameters_describe_nat_gateways_request_filter_name]`	Iterate through log field `Records.requestParameters.DescribeNatGatewaysRequest.Filter`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_describe_nat_gateways_request_filter_name` and `Records.requestParameters.DescribeNatGatewaysRequest.Filter.Name` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeNatGatewaysRequest.Filter.Value.content`	`target.resource.attribute.labels[records_request_parameters_describe_nat_gateways_request_filter_value_content]`	Iterate through log field `Records.requestParameters.DescribeNatGatewaysRequest.Filter`, then Iterate through log field `Records.requestParameters.DescribeNatGatewaysRequest.Filter.Value`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_describe_nat_gateways_request_filter_value_content` and `Records.requestParameters.DescribeNatGatewaysRequest.Filter.Value.content` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeNatGatewaysRequest.Filter.Value.tag`	`target.resource.attribute.labels[records_request_parameters_describe_nat_gateways_request_filter_value_tag]`	Iterate through log field `Records.requestParameters.DescribeNatGatewaysRequest.Filter`, then Iterate through log field `Records.requestParameters.DescribeNatGatewaysRequest.Filter.Value`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_describe_nat_gateways_request_filter_value_tag` and `Records.requestParameters.DescribeNatGatewaysRequest.Filter.Value.tag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeNatGatewaysRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_nat_gateways_request_max_results]`
`Records.requestParameters.DescribeNatGatewaysRequest.NatGatewayId.tag`	`target.resource.attribute.labels[records_request_parameters_describe_nat_gateways_request_nat_gateway_id_tag]`
`Records.requestParameters.DescribeNetworkInsightsAccessScopeAnalysesRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_network_insights_access_scope_analyses_request_max_results]`
`Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.NetworkInsightsAccessScopeId.tag`	`target.resource.attribute.labels[records_request_parameters_describe_network_insights_access_scopes_request_network_insights_access_scope_id_tag]`
`Records.requestParameters.DescribeNetworkInsightsAccessScopesRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_network_insights_access_scopes_request_max_results]`
`Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_network_insights_analyses_request_max_results]`
`Records.requestParameters.DescribeNetworkInsightsAnalysesRequest.NetworkInsightsAnalysisId.tag`	`target.resource.attribute.labels[records_request_parameters_describe_network_insights_analyses_request_network_insights_analysis_id_tag]`
`Records.requestParameters.DescribeNetworkInsightsPathsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_network_insights_paths_request_max_results]`
`Records.requestParameters.DescribeNetworkInsightsPathsRequest.NetworkInsightsPathId.tag`	`target.resource.attribute.labels[records_request_parameters_describe_network_insights_paths_request_network_insights_path_id_tag]`
`Records.requestParameters.DescribePrefixListsRequest.Filter.Name`	`target.resource.attribute.labels[records_request_parameters_describe_prefix_lists_request_filter_name]`
`Records.requestParameters.DescribePrefixListsRequest.Filter.Value.content`	`target.resource.attribute.labels[records_request_parameters_describe_prefix_lists_request_filter_value_content]`
`Records.requestParameters.DescribePrefixListsRequest.Filter.tag`	`target.resource.attribute.labels[records_request_parameters_describe_prefix_lists_request_filter_tag]`
`Records.requestParameters.DescribePrefixListsRequest.Filter.Value.tag`	`target.resource.attribute.labels[records_request_parameters_describe_prefix_lists_request_filter_value_tag]`
`Records.requestParameters.DescribePublicIpv4PoolsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_public_ipv4pools_request_max_results]`
`Records.requestParameters.allRegions`	`target.resource.attribute.labels[records_request_parameters_all_regions]`
`Records.requestParameters.DescribeReplaceRootVolumeTasksRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_replace_root_volume_tasks_request_max_results]`
`Records.requestParameters.DescribeReplaceRootVolumeTasksRequest.Filter.Name`	`target.resource.attribute.labels[records_request_parameters_describe_replace_root_volume_tasks_request_filter_name]`
`Records.requestParameters.DescribeReplaceRootVolumeTasksRequest.Filter.Value.content`	`target.resource.attribute.labels[records_request_parameters_describe_replace_root_volume_tasks_request_filter_value_content]`
`Records.requestParameters.DescribeReplaceRootVolumeTasksRequest.Filter.Value.tag`	`target.resource.attribute.labels[records_request_parameters_describe_replace_root_volume_tasks_request_filter_value_tag]`
`Records.requestParameters.DescribeReplaceRootVolumeTasksRequest.Filter.tag`	`target.resource.attribute.labels[records_request_parameters_describe_replace_root_volume_tasks_request_filter_tag]`
`Records.requestParameters.instanceTenancy`	`target.resource.attribute.labels[records_request_parameters_instance_tenancy]`
`Records.requestParameters.instanceType`	`target.resource.attribute.labels[records_request_parameters_instance_type]`
`Records.requestParameters.productDescription`	`target.resource.attribute.labels[records_request_parameters_product_description]`
`Records.requestParameters.minDuration`	`target.resource.attribute.labels[records_request_parameters_min_duration]`
`Records.requestParameters.includeMarketplace`	`target.resource.attribute.labels[records_request_parameters_include_marketplace]`
`Records.requestParameters.offeringType`	`target.resource.attribute.labels[records_request_parameters_offering_type]`
`Records.requestParameters.DescribeSecurityGroupRulesRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_security_group_rules_request_max_results]`
`Records.requestParameters.DescribeSecurityGroupRulesRequest.Filter.Name`	`target.resource.attribute.labels[records_request_parameters_describe_security_group_rules_request_filter_name]`
`Records.requestParameters.DescribeSecurityGroupRulesRequest.Filter.tag`	`target.resource.attribute.labels[records_request_parameters_describe_security_group_rules_request_filter_tag]`
`Records.requestParameters.DescribeSecurityGroupRulesRequest.Filter.Value.tag`	`target.resource.attribute.labels[records_request_parameters_describe_security_group_rules_request_filter_value_tag]`
`Records.requestParameters.DescribeSecurityGroupRulesRequest.Filter.Value.content`	`target.resource.attribute.labels[records_request_parameters_describe_security_group_rules_request_filter_value_content]`
`Records.requestParameters.DescribeSecurityGroupRulesRequest.SecurityGroupRuleId.tag`	`target.resource.attribute.labels[records_request_parameters_describe_security_group_rules_request_security_group_rule_id_tag]`
`Records.requestParameters.sharedUsersSet.items.user`	`target.resource.attribute.labels[records_request_parameters_shared_users_set_items_user]`	Iterate through log field `Records.requestParameters.sharedUsersSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_shared_users_set_items_user` and `Records.requestParameters.sharedUsersSet.items.user` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeSnapshotTierStatusRequest.Filter.Name`	`target.resource.attribute.labels[records_request_parameters_describe_snapshot_tier_status_request_filter_name]`
`Records.requestParameters.DescribeSnapshotTierStatusRequest.Filter.Value.content`	`target.resource.attribute.labels[records_request_parameters_describe_snapshot_tier_status_request_filter_value_content]`
`Records.requestParameters.DescribeSnapshotTierStatusRequest.Filter.tag`	`target.resource.attribute.labels[records_request_parameters_describe_snapshot_tier_status_request_filter_tag]`
`Records.requestParameters.DescribeSnapshotTierStatusRequest.Filter.Value.tag`	`target.resource.attribute.labels[records_request_parameters_describe_snapshot_tier_status_request_filter_value_tag]`
`Records.requestParameters.DescribeSpotFleetRequestsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_spot_fleet_requests_request_max_results]`
`Records.requestParameters.DescribeSpotFleetRequestsRequest.NextToken`	`target.resource.attribute.labels[records_request_parameters_describe_spot_fleet_requests_request_next_token]`
`Records.requestParameters.DescribeTrafficMirrorFiltersRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_traffic_mirror_filters_request_max_results]`
`Records.requestParameters.DescribeTrafficMirrorSessionsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_traffic_mirror_sessions_request_max_results]`
`Records.requestParameters.DescribeTrafficMirrorTargetsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_traffic_mirror_targets_request_max_results]`
`Records.requestParameters.DescribeTrafficMirrorTargetsRequest.Filter.Name`	`target.resource.attribute.labels[records_request_parameters_describe_traffic_mirror_targets_request_filter_name]`
`Records.requestParameters.DescribeTrafficMirrorTargetsRequest.Filter.tag`	`target.resource.attribute.labels[records_request_parameters_describe_traffic_mirror_targets_request_filter_tag]`
`Records.requestParameters.DescribeTrafficMirrorTargetsRequest.Filter.Value.content`	`target.resource.attribute.labels[records_request_parameters_describe_traffic_mirror_targets_request_filter_value_content]`
`Records.requestParameters.DescribeTrafficMirrorTargetsRequest.Filter.Value.tag`	`target.resource.attribute.labels[records_request_parameters_describe_traffic_mirror_targets_request_filter_value_tag]`
`Records.requestParameters.DescribeTransitGatewayAttachmentsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateway_attachments_request_max_results]`
`Records.requestParameters.DescribeTransitGatewayConnectPeersRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateway_connect_peers_request_max_results]`
`Records.requestParameters.DescribeTransitGatewayConnectsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateway_connects_request_max_results]`
`Records.requestParameters.DescribeTransitGatewayMulticastDomainsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateway_multicast_domains_request_max_results]`
`Records.requestParameters.DescribeTransitGatewayMulticastDomainsRequest.Filter.Name`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateway_multicast_domains_request_filter_name]`
`Records.requestParameters.DescribeTransitGatewayMulticastDomainsRequest.Filter.tag`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateway_multicast_domains_request_filter_tag]`
`Records.requestParameters.DescribeTransitGatewayMulticastDomainsRequest.Filter.Value.content`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateway_multicast_domains_request_filter_value_content]`	Iterate through log field `Records.requestParameters.DescribeTransitGatewayMulticastDomainsRequest.Filter.Value`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_describe_transit_gateway_multicast_domains_request_filter_value_content` and `Records.requestParameters.DescribeTransitGatewayMulticastDomainsRequest.Filter.Value.content` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeTransitGatewayMulticastDomainsRequest.Filter.Value.tag`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateway_multicast_domains_request_filter_value_tag]`	Iterate through log field `Records.requestParameters.DescribeTransitGatewayMulticastDomainsRequest.Filter.Value`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_describe_transit_gateway_multicast_domains_request_filter_value_tag` and `Records.requestParameters.DescribeTransitGatewayMulticastDomainsRequest.Filter.Value.tag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeTransitGatewayPeeringAttachmentsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateway_peering_attachments_request_max_results]`
`Records.requestParameters.DescribeTransitGatewayPolicyTablesRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateway_policy_tables_request_max_results]`
`Records.requestParameters.DescribeTransitGatewayRouteTableAnnouncementsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateway_route_table_announcements_request_max_results]`
`Records.requestParameters.DescribeTransitGatewayRouteTablesRequest.Filter.tag`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateway_route_tables_request_filter_tag]`	Iterate through log field `Records.requestParameters.DescribeTransitGatewayRouteTablesRequest.Filter`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_describe_transit_gateway_route_tables_request_filter_tag` and `Records.requestParameters.DescribeTransitGatewayRouteTablesRequest.Filter.tag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeTransitGatewayRouteTablesRequest.Filter.Name`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateway_route_tables_request_filter_name]`	Iterate through log field `Records.requestParameters.DescribeTransitGatewayRouteTablesRequest.Filter`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_describe_transit_gateway_route_tables_request_filter_name` and `Records.requestParameters.DescribeTransitGatewayRouteTablesRequest.Filter.Name` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeTransitGatewayRouteTablesRequest.Filter.Value.tag`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateway_route_tables_request_filter_value_tag]`	Iterate through log field `Records.requestParameters.DescribeTransitGatewayRouteTablesRequest.Filter`, then Iterate through log field `Records.requestParameters.DescribeTransitGatewayRouteTablesRequest.Filter.Value`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_describe_transit_gateway_route_tables_request_filter_value_tag` and `Records.requestParameters.DescribeTransitGatewayRouteTablesRequest.Filter.Value.tag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeTransitGatewayRouteTablesRequest.Filter.Value.content`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateway_route_tables_request_filter_value_content]`	Iterate through log field `Records.requestParameters.DescribeTransitGatewayRouteTablesRequest.Filter`, then Iterate through log field `Records.requestParameters.DescribeTransitGatewayRouteTablesRequest.Filter.Value`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_describe_transit_gateway_route_tables_request_filter_value_content` and `Records.requestParameters.DescribeTransitGatewayRouteTablesRequest.Filter.Value.content` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeTransitGatewayRouteTablesRequest.TransitGatewayRouteTableIds.tag`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateway_route_tables_request_transit_gateway_route_table_ids_tag]`
`Records.requestParameters.DescribeTransitGatewayRouteTablesRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateway_route_tables_request_max_results]`
`Records.requestParameters.DescribeTransitGatewayVpcAttachmentsRequest.TransitGatewayAttachmentIds.tag`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateway_vpc_attachments_request_transit_gateway_attachment_ids_tag]`
`Records.requestParameters.DescribeTransitGatewayVpcAttachmentsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateway_vpc_attachments_request_max_results]`
`Records.requestParameters.DescribeTransitGatewaysRequest.TransitGatewayIds.tag`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateways_request_transit_gateway_ids_tag]`
`Records.requestParameters.DescribeTransitGatewaysRequest.Filter.Name`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateways_request_filter_name]`
`Records.requestParameters.DescribeTransitGatewaysRequest.Filter.Value.content`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateways_request_filter_value_content]`	Iterate through log field `Records.requestParameters.DescribeTransitGatewaysRequest.Filter.Value`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_describe_transit_gateways_request_filter_value_content` and `Records.requestParameters.DescribeTransitGatewaysRequest.Filter.Value.content` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeTransitGatewaysRequest.Filter.tag`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateways_request_filter_tag]`
`Records.requestParameters.DescribeTransitGatewaysRequest.Filter.Value.tag`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateways_request_filter_value_tag]`	Iterate through log field `Records.requestParameters.DescribeTransitGatewaysRequest.Filter.Value`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_describe_transit_gateways_request_filter_value_tag` and `Records.requestParameters.DescribeTransitGatewaysRequest.Filter.Value.tag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.DescribeTransitGatewaysRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_transit_gateways_request_max_results]`
`Records.requestParameters.DescribeVerifiedAccessInstancesRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_verified_access_instances_request_max_results]`
`Records.requestParameters.DescribeVolumesModificationsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_volumes_modifications_request_max_results]`
`Records.requestParameters.DescribeVolumesModificationsRequest.Filter.Name`	`target.resource.attribute.labels[records_request_parameters_describe_volumes_modifications_request_filter_name]`
`Records.requestParameters.DescribeVolumesModificationsRequest.Filter.Value.content`	`target.resource.attribute.labels[records_request_parameters_describe_volumes_modifications_request_filter_value_content]`
`Records.requestParameters.DescribeVolumesModificationsRequest.Filter.tag`	`target.resource.attribute.labels[records_request_parameters_describe_volumes_modifications_request_filter_tag]`
`Records.requestParameters.DescribeVolumesModificationsRequest.Filter.Value.tag`	`target.resource.attribute.labels[records_request_parameters_describe_volumes_modifications_request_filter_value_tag]`
`Records.requestParameters.DescribeVpcClassicLinkDnsSupportRequest.VpcIds.tag`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_classic_link_dns_support_request_vpc_ids_tag]`
`Records.requestParameters.DescribeVpcEndpointConnectionNotificationsRequest.Filter.Name`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoint_connection_notifications_request_filter_name]`
`Records.requestParameters.DescribeVpcEndpointConnectionNotificationsRequest.Filter.tag`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoint_connection_notifications_request_filter_tag]`
`Records.requestParameters.DescribeVpcEndpointConnectionNotificationsRequest.Filter.Value.tag`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoint_connection_notifications_request_filter_value_tag]`
`Records.requestParameters.DescribeVpcEndpointConnectionNotificationsRequest.Filter.Value.content`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoint_connection_notifications_request_filter_value_content]`
`Records.requestParameters.DescribeVpcEndpointConnectionsRequest.Filter.tag`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoint_connections_request_filter_tag]`
`Records.requestParameters.DescribeVpcEndpointConnectionsRequest.Filter.Name`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoint_connections_request_filter_name]`
`Records.requestParameters.DescribeVpcEndpointConnectionsRequest.Filter.Value.tag`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoint_connections_request_filter_value_tag]`
`Records.requestParameters.DescribeVpcEndpointConnectionsRequest.Filter.Value.content`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoint_connections_request_filter_value_content]`
`Records.requestParameters.DescribeVpcEndpointServiceConfigurationsRequest.Filter.tag`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoint_service_configurations_request_filter_tag]`
`Records.requestParameters.DescribeVpcEndpointServiceConfigurationsRequest.Filter.Name`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoint_service_configurations_request_filter_name]`
`Records.requestParameters.DescribeVpcEndpointServiceConfigurationsRequest.Filter.Value.content`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoint_service_configurations_request_filter_value_content]`
`Records.requestParameters.DescribeVpcEndpointServiceConfigurationsRequest.Filter.Value.tag`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoint_service_configurations_request_filter_value_tag]`
`Records.requestParameters.DescribeVpcEndpointServiceConfigurationsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoint_service_configurations_request_max_results]`
`Records.requestParameters.DescribeVpcEndpointServiceConfigurationsRequest.ServiceId.tag`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoint_service_configurations_request_service_id_tag]`
`Records.requestParameters.DescribeVpcEndpointServicesRequest.Filter.Name`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoint_services_request_filter_name]`
`Records.requestParameters.DescribeVpcEndpointServicesRequest.Filter.Value.content`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoint_services_request_filter_value_content]`
`Records.requestParameters.DescribeVpcEndpointServicesRequest.Filter.Value.tag`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoint_services_request_filter_value_tag]`
`Records.requestParameters.DescribeVpcEndpointServicesRequest.Filter.tag`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoint_services_request_filter_tag]`
`Records.requestParameters.DescribeVpcEndpointServicesRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoint_services_request_max_results]`
`Records.requestParameters.DescribeVpcEndpointServicesRequest.ServiceName.tag`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoint_services_request_service_name_tag]`
`Records.requestParameters.DescribeVpcEndpointsRequest.Filter.Name`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoints_request_filter_name]`
`Records.requestParameters.DescribeVpcEndpointsRequest.Filter.Value.tag`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoints_request_filter_value_tag]`
`Records.requestParameters.DescribeVpcEndpointsRequest.Filter.tag`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoints_request_filter_tag]`
`Records.requestParameters.DescribeVpcEndpointsRequest.Filter.Value.content`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoints_request_filter_value_content]`
`Records.requestParameters.DescribeVpcEndpointsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoints_request_max_results]`
`Records.requestParameters.DescribeVpcEndpointsRequest.VpcEndpointId.tag`	`target.resource.attribute.labels[records_request_parameters_describe_vpc_endpoints_request_vpc_endpoint_id_tag]`
`Records.responseElements.device`	`target.resource.attribute.labels[records_response_elements_device]`
`Records.responseElements.EnableSerialConsoleAccessResponse.requestId`	`target.resource.attribute.labels[records_response_elements_enable_serial_console_access_response_request_id]`
`Records.responseElements.EnableSerialConsoleAccessResponse.serialConsoleAccessEnabled`	`target.resource.attribute.labels[records_response_elements_enable_serial_console_access_response_serial_console_access_enabled]`
`Records.requestParameters.GetCapacityReservationAccountAttributeRequest.PropertyName`	`target.resource.attribute.labels[records_request_parameters_get_capacity_reservation_account_attribute_request_property_name]`
`Records.requestParameters.GetDefaultCreditSpecificationRequest.InstanceFamily`	`target.resource.attribute.labels[records_request_parameters_get_default_credit_specification_request_instance_family]`
`Records.requestParameters.GetManagedPrefixListAssociationsRequest.PrefixListId`	`target.resource.attribute.labels[records_request_parameters_get_managed_prefix_list_associations_request_prefix_list_id]`
`Records.requestParameters.GetManagedPrefixListEntriesRequest.PrefixListId`	`target.resource.attribute.labels[records_request_parameters_get_managed_prefix_list_entries_request_prefix_list_id]`
`Records.requestParameters.GetManagedPrefixListEntriesRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_get_managed_prefix_list_entries_request_max_results]`
`Records.requestParameters.GetManagedPrefixListEntriesRequest.TargetVersion`	`target.resource.attribute.labels[records_request_parameters_get_managed_prefix_list_entries_request_target_version]`
`Records.requestParameters.GetSubnetCidrReservationsRequest.MaxResults`	`target.resource.attribute.labels[records_request_parameters_get_subnet_cidr_reservations_request_max_results]`
`Records.requestParameters.GetVpnConnectionDeviceSampleConfigurationRequest.InternetKeyExchangeVersion`	`target.resource.attribute.labels[records_request_parameters_get_vpn_connection_device_sample_configuration_request_internet_key_exchange_version]`
`Records.requestParameters.GetVpnConnectionDeviceSampleConfigurationRequest.VpnConnectionDeviceTypeId`	`target.resource.attribute.labels[records_request_parameters_get_vpn_connection_device_sample_configuration_request_vpn_connection_device_type_id]`
`Records.requestParameters.ModifyDefaultCreditSpecificationRequest.CpuCredits`	`target.resource.attribute.labels[records_request_parameters_modify_default_credit_specification_request_cpu_credits]`
`Records.requestParameters.ModifyDefaultCreditSpecificationRequest.InstanceFamily`	`target.resource.attribute.labels[records_request_parameters_modify_default_credit_specification_request_instance_family]`
`Records.responseElements.ModifyDefaultCreditSpecificationResponse.instanceFamilyCreditSpecification.cpuCredits`	`target.resource.attribute.labels[records_response_elements_modify_default_credit_specification_response_instance_family_credit_specification_cpu_credits]`
`Records.responseElements.ModifyDefaultCreditSpecificationResponse.instanceFamilyCreditSpecification.instanceFamily`	`target.resource.attribute.labels[records_response_elements_modify_default_credit_specification_response_instance_family_credit_specification_instance_family]`
`Records.responseElements.ModifyDefaultCreditSpecificationResponse.requestId`	`target.resource.attribute.labels[records_response_elements_modify_default_credit_specification_response_request_id]`
`Records.requestParameters.launchPermission.add.items.userId`	`target.resource.attribute.roles.name`	Iterate through log field `Records.requestParameters.launchPermission.add.items`, then `Records.requestParameters.launchPermission.add.items.userId` log field is mapped to the `target.resource.attribute.roles.name` UDM field. If the `Records.responseElements.ModifyVpcEndpointServicePermissionsResponse.addedPrincipalSet.item.principal` log field value is not empty then, `Records.responseElements.ModifyVpcEndpointServicePermissionsResponse.addedPrincipalSet.item.principal` log field is mapped to the `target.resource.attribute.roles.name` UDM field.
`Records.responseElements.ModifyVpcEndpointServicePermissionsResponse.addedPrincipalSet.item.principal`	`target.resource.attribute.roles.name`	Iterate through log field `Records.requestParameters.launchPermission.add.items`, then `Records.requestParameters.launchPermission.add.items.userId` log field is mapped to the `target.resource.attribute.roles.name` UDM field. If the `Records.responseElements.ModifyVpcEndpointServicePermissionsResponse.addedPrincipalSet.item.principal` log field value is not empty then, `Records.responseElements.ModifyVpcEndpointServicePermissionsResponse.addedPrincipalSet.item.principal` log field is mapped to the `target.resource.attribute.roles.name` UDM field.
	`target.resource.attribute.roles.type`	Iterate through log field `Records.requestParameters.launchPermission.add.items`, then the `target.resource.attribute.roles.type` UDM field is set to `SERVICE_ACCOUNT`. If the `Records.responseElements.ModifyVpcEndpointServicePermissionsResponse.addedPrincipalSet.item.principalType` log field value is not empty then, the `target.resource.attribute.roles.type` UDM field is set to `SERVICE_ACCOUNT`.
`Records.requestParameters.value`	`target.resource.attribute.labels[records_request_parameters_value]`
`Records.requestParameters.instanceType.value`	`target.resource.attribute.labels[records_request_parameters_instance_type_value]`
`Records.requestParameters.ebsOptimized.value`	`target.resource.attribute.labels[records_request_parameters_ebs_optimized_value]`
`Records.requestParameters.disableApiTermination.value`	`target.resource.attribute.labels[records_request_parameters_disable_api_termination_value]`
`Records.requestParameters.instanceInitiatedShutdownBehavior.value`	`target.resource.attribute.labels[records_request_parameters_instance_initiated_shutdown_behavior_value]`
`Records.requestParameters.sourceDestCheck.value`	`target.resource.attribute.labels[records_request_parameters_source_dest_check_value]`
`Records.requestParameters.ModifyInstanceMetadataOptionsRequest.HttpEndpoint`	`target.resource.attribute.labels[records_request_parameters_modify_instance_metadata_options_request_http_endpoint]`
`Records.requestParameters.ModifyInstanceMetadataOptionsRequest.HttpPutResponseHopLimit`	`target.resource.attribute.labels[records_request_parameters_modify_instance_metadata_options_request_http_put_response_hop_limit]`
`Records.requestParameters.ModifyInstanceMetadataOptionsRequest.HttpTokens`	`target.resource.attribute.labels[records_request_parameters_modify_instance_metadata_options_request_http_tokens]`
`Records.requestParameters.ModifyInstanceMetadataOptionsRequest.InstanceMetadataTags`	`target.resource.attribute.labels[records_request_parameters_modify_instance_metadata_options_request_instance_metadata_tags]`
`Records.responseElements.ModifyInstanceMetadataOptionsResponse.instanceMetadataOptions.instanceMetadataTags`	`target.resource.attribute.labels[records_response_elements_modify_instance_metadata_options_response_instance_metadata_options_instance_metadata_tags]`
`Records.responseElements.ModifyInstanceMetadataOptionsResponse.instanceMetadataOptions.httpEndpoint`	`target.resource.attribute.labels[records_response_elements_modify_instance_metadata_options_response_instance_metadata_options_http_endpoint]`
`Records.responseElements.ModifyInstanceMetadataOptionsResponse.instanceMetadataOptions.httpProtocolIpv4`	`target.resource.attribute.labels[records_response_elements_modify_instance_metadata_options_response_instance_metadata_options_http_protocol_ipv4]`
`Records.responseElements.ModifyInstanceMetadataOptionsResponse.instanceMetadataOptions.httpProtocolIpv6`	`target.resource.attribute.labels[records_response_elements_modify_instance_metadata_options_response_instance_metadata_options_http_protocol_ipv6]`
`Records.responseElements.ModifyInstanceMetadataOptionsResponse.instanceMetadataOptions.httpPutResponseHopLimit`	`target.resource.attribute.labels[records_response_elements_modify_instance_metadata_options_response_instance_metadata_options_http_put_response_hop_limit]`
`Records.responseElements.ModifyInstanceMetadataOptionsResponse.instanceMetadataOptions.httpTokens`	`target.resource.attribute.labels[records_response_elements_modify_instance_metadata_options_response_instance_metadata_options_http_tokens]`
`Records.responseElements.ModifyInstanceMetadataOptionsResponse.instanceMetadataOptions.state`	`target.resource.attribute.labels[records_response_elements_modify_instance_metadata_options_response_instance_metadata_options_state]`
`Records.requestParameters.attachment.attachmentId`	`target.resource.attribute.labels[records_request_parameters_attachment_attachment_id]`
`Records.requestParameters.attachment.deleteOnTermination`	`target.resource.attribute.labels[records_request_parameters_attachment_delete_on_termination]`
`Records.requestParameters.groupSet.items.groupId`	`target.resource.attribute.labels[records_request_parameters_group_set_items_group_id]`	Iterate through log field `Records.requestParameters.groupSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `Records_request_parameters_group_set_items_group_id` and `Records.requestParameters.groupSet.items.groupId` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ModifySecurityGroupRulesRequest.SecurityGroupRule.SecurityGroupRule.FromPort`	`target.resource.attribute.labels[records_request_parameters_modify_security_group_rules_request_security_group_rule_security_group_rule_from_port]`
`Records.requestParameters.ModifySecurityGroupRulesRequest.SecurityGroupRule.tag`	`target.resource.attribute.labels[records_request_parameters_modify_security_group_rules_request_security_group_rule_tag]`
`Records.requestParameters.ModifySecurityGroupRulesRequest.SecurityGroupRule.SecurityGroupRule.ToPort`	`target.resource.attribute.labels[records_request_parameters_modify_security_group_rules_request_security_group_rule_security_group_rule_to_port]`
`Records.requestParameters.ModifySecurityGroupRulesRequest.SecurityGroupRule.SecurityGroupRule.IpProtocol`	`target.resource.attribute.labels[records_request_parameters_modify_security_group_rules_request_security_group_rule_security_group_rule_ip_protocol]`
`Records.responseElements.ModifySecurityGroupRulesResponse.return`	`target.resource.attribute.labels[records_response_elements_modify_security_group_rules_response_return]`
`Records.responseElements.ModifySecurityGroupRulesResponse.requestId`	`target.resource.attribute.labels[records_response_elements_modify_security_group_rules_response_request_id]`
`Records.requestParameters.ModifySecurityGroupRulesRequest.SecurityGroupRule.SecurityGroupRule.Description`	`target.resource.attribute.labels[records_request_parameters_modify_security_group_rules_request_security_group_rule_security_group_rule_description]`
`Records.requestParameters.ModifySecurityGroupRulesRequest.SecurityGroupRule.SecurityGroupRule.CidrIpv4`	`target.resource.attribute.labels[records_request_parameters_modify_security_group_rules_request_security_group_rule_security_group_rule_cidr_ipv4]`
`Records.requestParameters.ModifySecurityGroupRulesRequest.GroupId`	`target.resource.attribute.labels[records_request_parameters_modify_security_group_rules_request_group_id]`
`Records.requestParameters.mapPublicIpOnLaunch.value`	`target.resource.attribute.labels[records_request_parameters_map_public_ip_on_launch_value]`
`Records.requestParameters.enableDnsHostnames.value`	`target.resource.attribute.labels[records_request_parameters_enable_dns_hostnames_value]`
`Records.requestParameters.enableDnsSupport.value`	`target.resource.attribute.labels[records_request_parameters_enable_dns_support_value]`
`Records.responseElements.ModifyVpcEndpointResponse.return`	`target.resource.attribute.labels[records_response_elements_modify_vpc_endpoint_response_return]`
`Records.responseElements.ModifyVpcEndpointResponse.requestId`	`target.resource.attribute.labels[records_response_elements_modify_vpc_endpoint_response_request_id]`
`Records.requestParameters.ModifyVpcEndpointRequest.AddRouteTableId.content`	`target.resource.attribute.labels[records_request_parameters_modify_vpc_endpoint_request_add_route_table_id_content]`	Iterate through log field `Records.requestParameters.ModifyVpcEndpointRequest.AddRouteTableId`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_modify_vpc_endpoint_request_add_route_table_id_content` and `Records.requestParameters.ModifyVpcEndpointRequest.AddRouteTableId.content` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ModifyVpcEndpointRequest.AddRouteTableId.tag`	`target.resource.attribute.labels[records_request_parameters_modify_vpc_endpoint_request_add_route_table_id_tag]`	Iterate through log field `Records.requestParameters.ModifyVpcEndpointRequest.AddRouteTableId`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_modify_vpc_endpoint_request_add_route_table_id_tag` and `Records.requestParameters.ModifyVpcEndpointRequest.AddRouteTableId.tag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ModifyVpcEndpointServiceConfigurationRequest.AcceptanceRequired`	`target.resource.attribute.labels[records_request_parameters_modify_vpc_endpoint_service_configuration_request_acceptance_required]`
`Records.requestParameters.ModifyVpcEndpointServiceConfigurationRequest.AddNetworkLoadBalancerArn.content`	`target.resource.attribute.labels[records_request_parameters_modify_vpc_endpoint_service_configuration_request_add_network_load_balancer_arn_content]`
`Records.requestParameters.ModifyVpcEndpointServiceConfigurationRequest.AddNetworkLoadBalancerArn.tag`	`target.resource.attribute.labels[records_request_parameters_modify_vpc_endpoint_service_configuration_request_add_network_load_balancer_arn_tag]`
`Records.requestParameters.ModifyVpcEndpointServiceConfigurationRequest.RemoveNetworkLoadBalancerArn.content`	`target.resource.attribute.labels[records_request_parameters_modify_vpc_endpoint_service_configuration_request_remove_network_load_balancer_arn_content]`
`Records.requestParameters.ModifyVpcEndpointServiceConfigurationRequest.RemoveNetworkLoadBalancerArn.tag`	`target.resource.attribute.labels[records_request_parameters_modify_vpc_endpoint_service_configuration_request_remove_network_load_balancer_arn_tag]`
`Records.responseElements.ModifyVpcEndpointServiceConfigurationResponse.requestId`	`target.resource.attribute.labels[records_response_elements_modify_vpc_endpoint_service_configuration_response_request_id]`
`Records.responseElements.ModifyVpcEndpointServiceConfigurationResponse.return`	`target.resource.attribute.labels[records_response_elements_modify_vpc_endpoint_service_configuration_response_return]`
`Records.requestParameters.ModifyVpcEndpointServiceConfigurationRequest.PrivateDnsName`	`target.hostname`
`Records.responseElements.ModifyVpcEndpointServicePermissionsResponse.return`	`target.resource.attribute.labels[records_response_elements_modify_vpc_endpoint_service_permissions_response_return]`
`Records.responseElements.ModifyVpcEndpointServicePermissionsResponse.requestId`	`target.resource.attribute.labels[records_response_elements_modify_vpc_endpoint_service_permissions_response_request_id]`
`Records.requestParameters.ModifyVpcEndpointServicePermissionsRequest.AddAllowedPrincipals.content`	`target.resource.attribute.labels[records_request_parameters_modify_vpc_endpoint_service_permissions_request_add_allowed_principals_content]`
`Records.requestParameters.ModifyVpcEndpointServicePermissionsRequest.AddAllowedPrincipals.tag`	`target.resource.attribute.labels[records_request_parameters_modify_vpc_endpoint_service_permissions_request_add_allowed_principals_tag]`
`Records.responseElements.ModifyVpcEndpointServicePermissionsResponse.addedPrincipalSet.item.principalType`	`target.resource.attribute.labels[records_response_elements_modify_vpc_endpoint_service_permissions_response_added_principal_set_item_principal_type]`
`Records.requestParameters.ModifyVpcEndpointServicePermissionsRequest.RemoveAllowedPrincipals.content`	`target.resource.attribute.labels[records_request_parameters_modify_vpc_endpoint_service_permissions_request_remove_allowed_principals_content]`
`Records.requestParameters.ModifyVpcEndpointServicePermissionsRequest.RemoveAllowedPrincipals.tag`	`target.resource.attribute.labels[records_request_parameters_modify_vpc_endpoint_service_permissions_request_remove_allowed_principals_tag]`
`Records.responseElements.instancesSet.items.currentState.code`	`target.resource.attribute.labels[records_response_elements_instances_set_items_current_state_code]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_instances_set_items_current_state_code` and `Records.responseElements.instancesSet.items.currentState.code` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `records_response_elements_instances_set_items_current_state_code` and `Records.responseElements.instancesSet.items.currentState.code` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.currentState.name`	`target.resource.attribute.labels[records_response_elements_instances_set_items_current_state_name]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_instances_set_items_current_state_name` and `Records.responseElements.instancesSet.items.currentState.name` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `records_response_elements_instances_set_items_current_state_name` and `Records.responseElements.instancesSet.items.currentState.name` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.previousState.name`	`target.resource.attribute.labels[records_response_elements_instances_set_items_previous_state_name]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_instances_set_items_previous_state_name` and `Records.responseElements.instancesSet.items.previousState.name` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `records_response_elements_instances_set_items_previous_state_name` and `Records.responseElements.instancesSet.items.previousState.name` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.previousState.code`	`target.resource.attribute.labels[records_response_elements_instances_set_items_previous_state_code]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_instances_set_items_previous_state_code` and `Records.responseElements.instancesSet.items.previousState.code` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `records_response_elements_instances_set_items_previous_state_code` and `Records.responseElements.instancesSet.items.previousState.code` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.requestParameters.StartNetworkInsightsAnalysisRequest.ClientToken`	`target.resource.attribute.labels[records_request_parameters_start_network_insights_analysis_request_client_token]`
`Records.requestParameters.StartNetworkInsightsAnalysisRequest.NetworkInsightsPathId`	`target.resource.attribute.labels[records_request_parameters_start_network_insights_analysis_request_network_insights_path_id]`
`Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.startDate`	`target.resource.attribute.labels[records_response_elements_start_network_insights_analysis_response_network_insights_analysis_start_date]`
`Records.responseElements.StartNetworkInsightsAnalysisResponse.networkInsightsAnalysis.status`	`target.resource.attribute.labels[records_response_elements_start_network_insights_analysis_response_network_insights_analysis_status]`
`Records.responseElements.StartNetworkInsightsAnalysisResponse.requestId`	`target.resource.attribute.labels[records_response_elements_start_network_insights_analysis_response_request_id]`
`Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.requestId`	`target.resource.attribute.labels[records_response_elements_start_network_insights_access_scope_analysis_response_request_id]`
`Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.status`	`target.resource.attribute.labels[records_response_elements_start_network_insights_access_scope_analysis_response_network_insights_access_scope_analysis_status]`
`Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.startDate`	`target.resource.attribute.labels[records_response_elements_start_network_insights_access_scope_analysis_response_network_insights_access_scope_analysis_start_date]`
`Records.requestParameters.StartNetworkInsightsAccessScopeAnalysisRequest.ClientToken`	`target.resource.attribute.labels[records_request_parameters_start_network_insights_access_scope_analysis_request_client_token]`
`Records.requestParameters.StartNetworkInsightsAccessScopeAnalysisRequest.NetworkInsightsAccessScopeId`	`target.resource.attribute.labels[records_request_parameters_start_network_insights_access_scope_analysis_request_network_insights_access_scope_id]`
`Records.responseElements.StartNetworkInsightsAccessScopeAnalysisResponse.networkInsightsAccessScopeAnalysis.analyzedEniCount`	`target.resource.attribute.labels[records_response_elements_start_network_insights_access_scope_analysis_response_network_insights_access_scope_analysis_analyzed_eni_count]`
`Records.requestParameters.UpdateSecurityGroupRuleDescriptionsIngressRequest.IpPermissions.FromPort`	`target.resource.attribute.labels[records_request_parameters_update_security_group_rule_descriptions_ingress_request_ip_permissions_from_port]`
`Records.requestParameters.UpdateSecurityGroupRuleDescriptionsIngressRequest.IpPermissions.IpProtocol`	`target.resource.attribute.labels[records_request_parameters_update_security_group_rule_descriptions_ingress_request_ip_permissions_ip_protocol]`
`Records.requestParameters.UpdateSecurityGroupRuleDescriptionsIngressRequest.IpPermissions.IpRanges.CidrIp`	`target.resource.attribute.labels[records_request_parameters_update_security_group_rule_descriptions_ingress_request_ip_permissions_ip_ranges_cidr_ip]`
`Records.requestParameters.UpdateSecurityGroupRuleDescriptionsIngressRequest.IpPermissions.IpRanges.Description`	`target.resource.attribute.labels[records_request_parameters_update_security_group_rule_descriptions_ingress_request_ip_permissions_ip_ranges_description]`
`Records.requestParameters.UpdateSecurityGroupRuleDescriptionsIngressRequest.IpPermissions.IpRanges.tag`	`target.resource.attribute.labels[records_request_parameters_update_security_group_rule_descriptions_ingress_request_ip_permissions_ip_ranges_tag]`
`Records.requestParameters.UpdateSecurityGroupRuleDescriptionsIngressRequest.IpPermissions.tag`	`target.resource.attribute.labels[records_request_parameters_update_security_group_rule_descriptions_ingress_request_ip_permissions_tag]`
`Records.requestParameters.UpdateSecurityGroupRuleDescriptionsIngressRequest.IpPermissions.ToPort`	`target.resource.attribute.labels[records_request_parameters_update_security_group_rule_descriptions_ingress_request_ip_permissions_to_port]`
`Records.responseElements.UpdateSecurityGroupRuleDescriptionsIngressResponse.requestId`	`target.resource.attribute.labels[records_response_elements_update_security_group_rule_descriptions_ingress_response_request_id]`
`Records.responseElements.UpdateSecurityGroupRuleDescriptionsIngressResponse.return`	`target.resource.attribute.labels[records_response_elements_update_security_group_rule_descriptions_ingress_response_return]`
`Records.responseElements.ReplaceVpnTunnelResponse.return`	`target.resource.attribute.labels[records_response_elements_replace_vpn_tunnel_response_return]`
`Records.responseElements.ReplaceVpnTunnelResponse.requestId`	`target.resource.attribute.labels[records_response_elements_replace_vpn_tunnel_response_request_id]`
`Records.requestParameters.ReplaceVpnTunnelRequest.VpnTunnelOutsideIpAddress`	`target.resource.attribute.labels[records_request_parameters_replace_vpn_tunnel_request_vpn_tunnel_outside_ip_address]`
`Records.requestParameters.ipPermissions.items.ipv6Ranges.items.cidrIpv6`	`target.resource.attribute.labels[records_request_parameters_ip_permissions_items_ipv6ranges_items_cidr_ipv6]`	Iterate through log field `Records.requestParameters.ipPermissions.items`, then Iterate through log field `Records.requestParameters.ipPermissions.items.ipv6Ranges.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_ip_permissions_items_ipv6_ranges_items` and `Records.requestParameters.ipPermissions.items.ipv6Ranges.items.cidrIpv6` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.unknownIpPermissionSet.items.ipv6Ranges.items.cidrIpv6`	`target.resource.attribute.labels[records_response_elements_unknown_ip_permission_set_items_ipv6ranges_items_cidr_ipv6]`	Iterate through log field `Records.responseElements.unknownIpPermissionSet.items`, then Iterate through log field `Records.responseElements.unknownIpPermissionSet.items.ipv6Ranges.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_unknown_ip_permission_set_items_ipv6_ranges_items_cidr_ipv6` and `Records.responseElements.unknownIpPermissionSet.items.ipv6Ranges.items.cidrIpv6` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.unknownIpPermissionSet.items.ipProtocol`	`target.resource.attribute.labels[records_response_elements_unknown_ip_permission_set_items_ip_protocol]`	Iterate through log field `Records.responseElements.unknownIpPermissionSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_unknown_ip_permission_set_items_ip_protocol` and `Records.responseElements.unknownIpPermissionSet.items.ipProtocol` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.securityGroupRuleIds.items.securityGroupRuleId`	`target.resource.attribute.labels[records_request_parameters_security_group_rule_ids_items_security_group_rule_id]`	Iterate through log field `Records.requestParameters.securityGroupRuleIds.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_security_group_rule_ids_items_security_group_rule_id` and `Records.requestParameters.securityGroupRuleIds.items.securityGroupRuleId` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ipPermissions.items.groups.items.groupId`	`target.resource.attribute.labels[records_request_parameters_ip_permissions_items_groups_items_group_id]`	Iterate through log field `Records.requestParameters.ipPermissions.items`, then Iterate through log field `Records.requestParameters.ipPermissions.items.groups.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_ip_permissions_items_groups_items_group_id` and `Records.requestParameters.ipPermissions.items.groups.items.groupId` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ipPermissions.items.groups.items.userId`	`target.resource.attribute.labels[records_request_parameters_ip_permissions_items_groups_items_user_id]`	Iterate through log field `Records.requestParameters.ipPermissions.items`, then Iterate through log field `Records.requestParameters.ipPermissions.items.groups.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_ip_permissions_items_groups_items_user_id` and `Records.requestParameters.ipPermissions.items.groups.items.userId` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ReplaceIamInstanceProfileAssociationRequest.AssociationId`	`target.resource.attribute.labels[records_request_parameters_replace_iam_instance_profile_association_request_association_id]`
`Records.requestParameters.ReplaceIamInstanceProfileAssociationRequest.IamInstanceProfile.Arn`	`target.resource.attribute.labels[records_request_parameters_replace_iam_instance_profile_association_request_iam_instance_profile_arn]`
`Records.requestParameters.ReplaceIamInstanceProfileAssociationRequest.IamInstanceProfile.Name`	`target.resource.attribute.labels[records_request_parameters_replace_iam_instance_profile_association_request_iam_instance_profile_name]`
`Records.responseElements.ReplaceIamInstanceProfileAssociationResponse.iamInstanceProfileAssociation.associationId`	`target.resource.attribute.labels[records_response_elements_replace_iam_instance_profile_association_response_iam_instance_profile_association_association_id]`
`Records.responseElements.ReplaceIamInstanceProfileAssociationResponse.iamInstanceProfileAssociation.iamInstanceProfile.arn`	`target.resource.attribute.labels[records_response_elements_replace_iam_instance_profile_association_response_iam_instance_profile_association_iam_instance_profile_arn]`
`Records.responseElements.ReplaceIamInstanceProfileAssociationResponse.iamInstanceProfileAssociation.iamInstanceProfile.id`	`target.resource.attribute.labels[records_response_elements_replace_iam_instance_profile_association_response_iam_instance_profile_association_iam_instance_profile_id]`
`Records.responseElements.ReplaceIamInstanceProfileAssociationResponse.iamInstanceProfileAssociation.state`	`target.resource.attribute.labels[records_response_elements_replace_iam_instance_profile_association_response_iam_instance_profile_association_state]`
`Records.responseElements.ReplaceIamInstanceProfileAssociationResponse.requestId`	`target.resource.attribute.labels[records_response_elements_replace_iam_instance_profile_association_response_request_id]`
`Records.requestParameters.architecture`	`target.resource.attribute.labels[records_request_parameters_architecture]`
`Records.requestParameters.blockDeviceMapping.items.deviceName`	`target.resource.attribute.labels[records_request_parameters_block_device_mapping_items_device_name]`	Iterate through log field `Records.requestParameters.blockDeviceMapping.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_block_device_mapping_items_device_name` and `Records.requestParameters.blockDeviceMapping.items.deviceName` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.blockDeviceMapping.items.ebs.deleteOnTermination`	`target.resource.attribute.labels[records_request_parameters_block_device_mapping_items_ebs_delete_on_termination]`	Iterate through log field `Records.requestParameters.blockDeviceMapping.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_block_device_mapping_items_ebs_delete_on_termination` and `Records.requestParameters.blockDeviceMapping.items.ebs.deleteOnTermination` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.blockDeviceMapping.items.ebs.iops`	`target.resource.attribute.labels[records_request_parameters_block_device_mapping_items_ebs_iops]`	Iterate through log field `Records.requestParameters.blockDeviceMapping.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_block_device_mapping_items_ebs_iops` and `Records.requestParameters.blockDeviceMapping.items.ebs.iops` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.blockDeviceMapping.items.ebs.snapshotId`	`target.resource.attribute.labels[records_request_parameters_block_device_mapping_items_ebs_snapshot_id]`	Iterate through log field `Records.requestParameters.blockDeviceMapping.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_block_device_mapping_items_ebs_snapshot_id` and `Records.requestParameters.blockDeviceMapping.items.ebs.snapshotId` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.blockDeviceMapping.items.ebs.throughput`	`target.resource.attribute.labels[records_request_parameters_block_device_mapping_items_ebs_throughput]`	Iterate through log field `Records.requestParameters.blockDeviceMapping.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_block_device_mapping_items_ebs_throughput` and `Records.requestParameters.blockDeviceMapping.items.ebs.throughput` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.blockDeviceMapping.items.ebs.volumeSize`	`target.resource.attribute.labels[records_request_parameters_block_device_mapping_items_ebs_volume_size]`	Iterate through log field `Records.requestParameters.blockDeviceMapping.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_block_device_mapping_items_ebs_volume_size` and `Records.requestParameters.blockDeviceMapping.items.ebs.volumeSize` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.blockDeviceMapping.items.ebs.volumeType`	`target.resource.attribute.labels[records_request_parameters_block_device_mapping_items_ebs_volume_type]`	Iterate through log field `Records.requestParameters.blockDeviceMapping.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_block_device_mapping_items_ebs_volume_type` and `Records.requestParameters.blockDeviceMapping.items.ebs.volumeType` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.enaSupport`	`target.resource.attribute.labels[records_request_parameters_ena_support]`
`Records.requestParameters.rootDeviceName`	`target.resource.attribute.labels[records_request_parameters_root_device_name]`
`Records.requestParameters.ModifyVolumeRequest.Iops`	`target.resource.attribute.labels[records_request_parameters_modify_volume_request_iops]`
`Records.requestParameters.ModifyVolumeRequest.Size`	`target.resource.attribute.labels[records_request_parameters_modify_volume_request_size]`
`Records.requestParameters.ModifyVolumeRequest.Throughput`	`target.resource.attribute.labels[records_request_parameters_modify_volume_request_throughput]`
`Records.requestParameters.ModifyVolumeRequest.VolumeType`	`target.resource.attribute.labels[records_request_parameters_modify_volume_request_volume_type]`
`Records.responseElements.ModifyVolumeResponse.requestId`	`target.resource.attribute.labels[records_response_elements_modify_volume_response_request_id]`
`Records.responseElements.ModifyVolumeResponse.volumeModification.modificationState`	`target.resource.attribute.labels[records_response_elements_modify_volume_response_volume_modification_modification_state]`
`Records.responseElements.ModifyVolumeResponse.volumeModification.originalIops`	`target.resource.attribute.labels[records_response_elements_modify_volume_response_volume_modification_original_iops]`
`Records.responseElements.ModifyVolumeResponse.volumeModification.originalMultiAttachEnabled`	`target.resource.attribute.labels[records_response_elements_modify_volume_response_volume_modification_original_multi_attach_enabled]`
`Records.responseElements.ModifyVolumeResponse.volumeModification.originalSize`	`target.resource.attribute.labels[records_response_elements_modify_volume_response_volume_modification_original_size]`
`Records.responseElements.ModifyVolumeResponse.volumeModification.originalThroughput`	`target.resource.attribute.labels[records_response_elements_modify_volume_response_volume_modification_original_throughput]`
`Records.responseElements.ModifyVolumeResponse.volumeModification.originalVolumeType`	`target.resource.attribute.labels[records_response_elements_modify_volume_response_volume_modification_original_volume_type]`
`Records.responseElements.ModifyVolumeResponse.volumeModification.progress`	`target.resource.attribute.labels[records_response_elements_modify_volume_response_volume_modification_progress]`
`Records.responseElements.ModifyVolumeResponse.volumeModification.startTime`	`target.resource.attribute.last_update_time`
`Records.responseElements.CreateNetworkInsightsAccessScopeResponse.networkInsightsAccessScope.updatedDate`	`target.resource.attribute.last_update_time`
`Records.responseElements.ModifyVolumeResponse.volumeModification.targetIops`	`target.resource.attribute.labels[records_response_elements_modify_volume_response_volume_modification_target_iops]`
`Records.responseElements.ModifyVolumeResponse.volumeModification.targetMultiAttachEnabled`	`target.resource.attribute.labels[records_response_elements_modify_volume_response_volume_modification_target_multi_attach_enabled]`
`Records.responseElements.ModifyVolumeResponse.volumeModification.targetSize`	`target.resource.attribute.labels[records_response_elements_modify_volume_response_volume_modification_target_size]`
`Records.responseElements.ModifyVolumeResponse.volumeModification.targetThroughput`	`target.resource.attribute.labels[records_response_elements_modify_volume_response_volume_modification_target_throughput]`
`Records.responseElements.ModifyVolumeResponse.volumeModification.targetVolumeType`	`target.resource.attribute.labels[records_response_elements_modify_volume_response_volume_modification_target_volume_type]`
`Records.requestParameters.ModifyVpnConnectionOptionsRequest.LocalIpv4NetworkCidr`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_connection_options_request_local_ipv4network_cidr]`
`Records.requestParameters.ModifyVpnConnectionOptionsRequest.RemoteIpv4NetworkCidr`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_connection_options_request_remote_ipv4network_cidr]`
`Records.responseElements.ModifyVpnConnectionOptionsResponse.requestId`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_request_id]`
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.category`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_category]`
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.customerGatewayConfiguration`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_customer_gateway_configuration]`
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.customerGatewayId`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_customer_gateway_id]`
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.gatewayAssociationState`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_gateway_association_state]`
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.enableAcceleration`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_enable_acceleration]`
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.localIpv4NetworkCidr`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_local_ipv4network_cidr]`
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.outsideIpAddressType`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_outside_ip_address_type]`
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.remoteIpv4NetworkCidr`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_remote_ipv4network_cidr]`
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.staticRoutesOnly`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_static_routes_only]`
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelInsideIpVersion`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_inside_ip_version]`
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.dpdTimeoutAction`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_dpd_timeout_action]`	Iterate through log field `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_dpd_timeout_action` and `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.dpdTimeoutAction` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.enableTunnelLifecycleControl`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_enable_tunnel_lifecycle_control]`	Iterate through log field `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_enable_tunnel_lifecycle_control` and `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.enableTunnelLifecycleControl` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.ikeVersionSet.item.value`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_ike_version_set_item_value]`	Iterate through log field `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_ike_version_set_item_value` and `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.ikeVersionSet.item.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.logOptions.cloudWatchLogOptions.logEnabled`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_log_options_cloud_watch_log_options_log_enabled]`	Iterate through log field `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_log_options_cloud_watch_log_options_log_enabled` and `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.logOptions.cloudWatchLogOptions.logEnabled` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.logOptions.cloudWatchLogOptions.logGroupArn`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_log_options_cloud_watch_log_options_log_group_arn]`	Iterate through log field `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_log_options_cloud_watch_log_options_log_group_arn` and `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.logOptions.cloudWatchLogOptions.logGroupArn` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.logOptions.cloudWatchLogOptions.logOutputFormat`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_log_options_cloud_watch_log_options_log_output_format]`	Iterate through log field `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_log_options_cloud_watch_log_options_log_output_format` and `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.logOptions.cloudWatchLogOptions.logOutputFormat` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.outsideIpAddress`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_outside_ip_address]`	Iterate through log field `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_outside_ip_address` and `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.outsideIpAddress` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase1DHGroupNumberSet.item.value`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_phase1dhgroup_number_set_item_value]`	Iterate through log field `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_phase1dhgroup_number_set_item_value` and `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase1DHGroupNumberSet.item.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase1EncryptionAlgorithmSet.item.value`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_phase1encryption_algorithm_set_item_value]`	Iterate through log field `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_phase1encryption_algorithm_set_item_value` and `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase1EncryptionAlgorithmSet.item.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase1IntegrityAlgorithmSet.item.value`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_phase1integrity_algorithm_set_item_value]`	Iterate through log field `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_phase1integrity_algorithm_set_item_value` and `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase1IntegrityAlgorithmSet.item.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase2DHGroupNumberSet.item.value`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_phase2dhgroup_number_set_item_value]`	Iterate through log field `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_phase2dhgroup_number_set_item_value` and `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase2DHGroupNumberSet.item.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase2EncryptionAlgorithmSet.item.value`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_phase2encryption_algorithm_set_item_value]`	Iterate through log field `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_phase2encryption_algorithm_set_item_value` and `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase2EncryptionAlgorithmSet.item.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase2IntegrityAlgorithmSet.item.value`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_phase2integrity_algorithm_set_item_value]`	Iterate through log field `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_phase2integrity_algorithm_set_item_value` and `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase2IntegrityAlgorithmSet.item.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.preSharedKey`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_pre_shared_key]`	Iterate through log field `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_pre_shared_key` and `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.preSharedKey` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.startupAction`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_startup_action]`	Iterate through log field `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_startup_action` and `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.startupAction` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.tunnelInsideCidr`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_tunnel_inside_cidr]`	Iterate through log field `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_connection_options_response_vpn_connection_options_tunnel_option_set_item_tunnel_inside_cidr` and `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.options.tunnelOptionSet.item.tunnelInsideCidr` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.routes.item.destinationCidrBlock`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_routes_item_destination_cidr_block]`
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.routes.item.state`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_routes_item_state]`
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.state`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_state]`
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.type`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_type]`
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vgwTelemetry.item.acceptedRouteCount`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_vgw_telemetry_item_accepted_route_count]`	Iterate through log field `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vgwTelemetry.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_connection_options_response_vpn_connection_vgw_telemetry_item_accepted_route_count` and `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vgwTelemetry.item.acceptedRouteCount` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vgwTelemetry.item.lastStatusChange`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_vgw_telemetry_item_last_status_change]`	Iterate through log field `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vgwTelemetry.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_connection_options_response_vpn_connection_vgw_telemetry_item_last_status_change` and `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vgwTelemetry.item.lastStatusChange` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vgwTelemetry.item.outsideIpAddress`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_vgw_telemetry_item_outside_ip_address]`	Iterate through log field `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vgwTelemetry.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_connection_options_response_vpn_connection_vgw_telemetry_item_outside_ip_address` and `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vgwTelemetry.item.outsideIpAddress` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vgwTelemetry.item.status`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_vgw_telemetry_item_status]`	Iterate through log field `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vgwTelemetry.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_connection_options_response_vpn_connection_vgw_telemetry_item_status` and `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vgwTelemetry.item.status` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vgwTelemetry.item.statusMessage`	`target.resource.attribute.labels[records_response_elements_modify_vpn_connection_options_response_vpn_connection_vgw_telemetry_item_status_message]`	Iterate through log field `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vgwTelemetry.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_connection_options_response_vpn_connection_vgw_telemetry_item_status_message` and `Records.responseElements.ModifyVpnConnectionOptionsResponse.vpnConnection.vgwTelemetry.item.statusMessage` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.SkipTunnelReplacement`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_skip_tunnel_replacement]`
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.DPDTimeoutAction`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_dpdtimeout_action]`
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.EnableTunnelLifecycleControl`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_enable_tunnel_lifecycle_control]`
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.IKEVersion.tag`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_ikeversion_tag]`
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.IKEVersion.Value`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_ikeversion_value]`
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.LogOptions.CloudWatchLogOptions.LogEnabled`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_log_options_cloud_watch_log_options_log_enabled]`
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.LogOptions.CloudWatchLogOptions.LogGroupArn`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_log_options_cloud_watch_log_options_log_group_arn]`
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.LogOptions.CloudWatchLogOptions.LogOutputFormat`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_log_options_cloud_watch_log_options_log_output_format]`
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase1DHGroupNumber.tag`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase1dhgroup_number_tag]`	Iterate through log field `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase1DHGroupNumber`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase1dhgroup_number_tag` and `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase1DHGroupNumber.tag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase1DHGroupNumber.Value`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase1dhgroup_number_value]`	Iterate through log field `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase1DHGroupNumber`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase1dhgroup_number_value` and `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase1DHGroupNumber.Value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase1EncryptionAlgorithm.tag`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase1encryption_algorithm_tag]`	Iterate through log field `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase1EncryptionAlgorithm`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase1encryption_algorithm_tag` and `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase1EncryptionAlgorithm.tag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase1EncryptionAlgorithm.Value`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase1encryption_algorithm_value]`	Iterate through log field `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase1EncryptionAlgorithm`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase1encryption_algorithm_value` and `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase1EncryptionAlgorithm.Value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase1IntegrityAlgorithm.tag`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase1integrity_algorithm_tag]`	Iterate through log field `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase1IntegrityAlgorithm`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase1integrity_algorithm_tag` and `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase1IntegrityAlgorithm.tag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase1IntegrityAlgorithm.Value`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase1integrity_algorithm_value]`	Iterate through log field `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase1IntegrityAlgorithm`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase1integrity_algorithm_value` and `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase1IntegrityAlgorithm.Value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase2DHGroupNumber.tag`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase2dhgroup_number_tag]`	Iterate through log field `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase2DHGroupNumber`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase2dhgroup_number_tag` and `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase2DHGroupNumber.tag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase2DHGroupNumber.Value`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase2dhgroup_number_value]`	Iterate through log field `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase2DHGroupNumber`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase2dhgroup_number_value` and `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase2DHGroupNumber.Value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase2EncryptionAlgorithm.tag`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase2encryption_algorithm_tag]`	Iterate through log field `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase2EncryptionAlgorithm`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase2encryption_algorithm_tag` and `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase2EncryptionAlgorithm.tag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase2EncryptionAlgorithm.Value`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase2encryption_algorithm_value]`	Iterate through log field `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase2EncryptionAlgorithm`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase2encryption_algorithm_value` and `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase2EncryptionAlgorithm.Value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase2IntegrityAlgorithm.tag`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase2integrity_algorithm_tag]`	Iterate through log field `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase2IntegrityAlgorithm`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase2integrity_algorithm_tag` and `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase2IntegrityAlgorithm.tag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase2IntegrityAlgorithm.Value`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase2integrity_algorithm_value]`	Iterate through log field `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase2IntegrityAlgorithm`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase2integrity_algorithm_value` and `Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase2IntegrityAlgorithm.Value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.PreSharedKey`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_pre_shared_key]`
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.StartupAction`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_startup_action]`
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.TunnelInsideCidr`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_tunnel_inside_cidr]`
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.VpnTunnelOutsideIpAddress`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_vpn_tunnel_outside_ip_address]`
`Records.responseElements.ModifyVpnTunnelOptionsResponse.requestId`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_request_id]`
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.category`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_category]`
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.customerGatewayConfiguration`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_customer_gateway_configuration]`
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.customerGatewayId`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_customer_gateway_id]`
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.gatewayAssociationState`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_gateway_association_state]`
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.enableAcceleration`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_enable_acceleration]`
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.localIpv4NetworkCidr`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_local_ipv4network_cidr]`
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.outsideIpAddressType`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_outside_ip_address_type]`
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.remoteIpv4NetworkCidr`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_remote_ipv4network_cidr]`
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.staticRoutesOnly`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_static_routes_only]`
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelInsideIpVersion`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_inside_ip_version]`
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.dpdTimeoutAction`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_dpd_timeout_action]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_dpd_timeout_action` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.dpdTimeoutAction` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.enableTunnelLifecycleControl`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_enable_tunnel_lifecycle_control]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_enable_tunnel_lifecycle_control` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.enableTunnelLifecycleControl` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.ikeVersionSet.item.value`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_ike_version_set_item_value]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_ike_version_set_item_value` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.ikeVersionSet.item.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.logOptions.cloudWatchLogOptions.logEnabled`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_log_options_cloud_watch_log_options_log_enabled]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_log_options_cloud_watch_log_options_log_enabled` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.logOptions.cloudWatchLogOptions.logEnabled` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.logOptions.cloudWatchLogOptions.logGroupArn`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_log_options_cloud_watch_log_options_log_group_arn]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_log_options_cloud_watch_log_options_log_group_arn` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.logOptions.cloudWatchLogOptions.logGroupArn` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.logOptions.cloudWatchLogOptions.logOutputFormat`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_log_options_cloud_watch_log_options_log_output_format]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_log_options_cloud_watch_log_options_log_output_format` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.logOptions.cloudWatchLogOptions.logOutputFormat` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase1DHGroupNumberSet.item.value`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_phase1dhgroup_number_set_item_value]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase1DHGroupNumberSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_phase1_dhgroup_number_set_item_value` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase1DHGroupNumberSet.item.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase1EncryptionAlgorithmSet.item.value`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_phase1encryption_algorithm_set_item_value]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase1EncryptionAlgorithmSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_phase1_encryption_algorithm_set_item_value` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase1EncryptionAlgorithmSet.item.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase1IntegrityAlgorithmSet.item.value`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_phase1integrity_algorithm_set_item_value]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase1IntegrityAlgorithmSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_phase1_integrity_algorithm_set_item_value` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase1IntegrityAlgorithmSet.item.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase2DHGroupNumberSet.item.value`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_phase2dhgroup_number_set_item_value]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase2DHGroupNumberSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_phase2_dhgroup_number_set_item_value` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase2DHGroupNumberSet.item.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase2EncryptionAlgorithmSet.item.value`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_phase2encryption_algorithm_set_item_value]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase2EncryptionAlgorithmSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_phase2_encryption_algorithm_set_item_value` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase2EncryptionAlgorithmSet.item.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase2IntegrityAlgorithmSet.item.value`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_phase2integrity_algorithm_set_item_value]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase2IntegrityAlgorithmSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_phase2_integrity_algorithm_set_item_value` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.phase2IntegrityAlgorithmSet.item.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.preSharedKey`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_pre_shared_key]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_pre_shared_key` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.preSharedKey` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.startupAction`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_startup_action]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_startup_action` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.startupAction` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.tunnelInsideCidr`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_tunnel_inside_cidr]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_options_tunnel_option_set_item_tunnel_inside_cidr` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.options.tunnelOptionSet.item.tunnelInsideCidr` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.routes.item.destinationCidrBlock`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_routes_item_destination_cidr_block]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.routes.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_routes_item_destination_cidr_block` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.routes.item.destinationCidrBlock` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.routes.item.state`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_routes_item_state]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.routes.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_routes_item_state` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.routes.item.state` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.state`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_state]`
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.type`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_type]`
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vgwTelemetry.item.acceptedRouteCount`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_vgw_telemetry_item_accepted_route_count]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vgwTelemetry.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_vgw_telemetry_item_accepted_route_count` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vgwTelemetry.item.acceptedRouteCount` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vgwTelemetry.item.lastStatusChange`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_vgw_telemetry_item_last_status_change]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vgwTelemetry.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_vgw_telemetry_item_last_status_change` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vgwTelemetry.item.lastStatusChange` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vgwTelemetry.item.outsideIpAddress`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_vgw_telemetry_item_outside_ip_address]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vgwTelemetry.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_vgw_telemetry_item_outside_ip_address` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vgwTelemetry.item.outsideIpAddress` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vgwTelemetry.item.status`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_vgw_telemetry_item_status]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vgwTelemetry.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_vgw_telemetry_item_status` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vgwTelemetry.item.status` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vgwTelemetry.item.statusMessage`	`target.resource.attribute.labels[records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_vgw_telemetry_item_status_message]`	Iterate through log field `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vgwTelemetry.item`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_modify_vpn_tunnel_options_response_vpn_connection_vgw_telemetry_item_status_message` and `Records.responseElements.ModifyVpnTunnelOptionsResponse.vpnConnection.vgwTelemetry.item.statusMessage` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase1LifetimeSeconds`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase1lifetime_seconds]`
`Records.requestParameters.ModifyVpnTunnelOptionsRequest.TunnelOptions.Phase2LifetimeSeconds`	`target.resource.attribute.labels[records_request_parameters_modify_vpn_tunnel_options_request_tunnel_options_phase2lifetime_seconds]`
`Records.requestParameters.CreateFleetRequest.ClientToken`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_client_token]`
`Records.requestParameters.CreateFleetRequest.ExistingInstances.AvailabilityZone`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_existing_instances_availability_zone]`	Iterate through log field `Records.requestParameters.CreateFleetRequest.ExistingInstances`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_create_fleet_request_existing_instances_availability_zone` and `Records.requestParameters.CreateFleetRequest.ExistingInstances.AvailabilityZone` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateFleetRequest.ExistingInstances.Count`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_existing_instances_count]`	Iterate through log field `Records.requestParameters.CreateFleetRequest.ExistingInstances`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_create_fleet_request_existing_instances_count` and `Records.requestParameters.CreateFleetRequest.ExistingInstances.Count` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateFleetRequest.ExistingInstances.InstanceType`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_existing_instances_instance_type]`	Iterate through log field `Records.requestParameters.CreateFleetRequest.ExistingInstances`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_create_fleet_request_existing_instances_instance_type` and `Records.requestParameters.CreateFleetRequest.ExistingInstances.InstanceType` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateFleetRequest.ExistingInstances.MarketOption`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_existing_instances_market_option]`	Iterate through log field `Records.requestParameters.CreateFleetRequest.ExistingInstances`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_create_fleet_request_existing_instances_market_option` and `Records.requestParameters.CreateFleetRequest.ExistingInstances.MarketOption` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateFleetRequest.ExistingInstances.OperatingSystem`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_existing_instances_operating_system]`	Iterate through log field `Records.requestParameters.CreateFleetRequest.ExistingInstances`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_create_fleet_request_existing_instances_operating_system` and `Records.requestParameters.CreateFleetRequest.ExistingInstances.OperatingSystem` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateFleetRequest.ExistingInstances.tag`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_existing_instances_tag]`	Iterate through log field `Records.requestParameters.CreateFleetRequest.ExistingInstances`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_create_fleet_request_existing_instances_tag` and `Records.requestParameters.CreateFleetRequest.ExistingInstances.tag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateFleetRequest.LaunchTemplateConfigs.LaunchTemplateSpecification.LaunchTemplateId`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_launch_template_configs_launch_template_specification_launch_template_id]`
`Records.requestParameters.CreateFleetRequest.LaunchTemplateConfigs.LaunchTemplateSpecification.Version`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_launch_template_configs_launch_template_specification_version]`
`Records.requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides.AvailabilityZone`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_launch_template_configs_overrides_availability_zone]`	Iterate through log field `Records.requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_create_fleet_request_launch_template_configs_overrides_availability_zone` and `Records.requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides.AvailabilityZone` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides.InstanceType`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_launch_template_configs_overrides_instance_type]`	Iterate through log field `Records.requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_create_fleet_request_launch_template_configs_overrides_instance_type` and `Records.requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides.InstanceType` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides.Priority`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_launch_template_configs_overrides_priority]`	Iterate through log field `Records.requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_create_fleet_request_launch_template_configs_overrides_priority` and `Records.requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides.Priority` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides.SubnetId`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_launch_template_configs_overrides_subnet_id]`	Iterate through log field `Records.requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_create_fleet_request_launch_template_configs_overrides_subnet_id` and `Records.requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides.SubnetId` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides.tag`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_launch_template_configs_overrides_tag]`	Iterate through log field `Records.requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_create_fleet_request_launch_template_configs_overrides_tag` and `Records.requestParameters.CreateFleetRequest.LaunchTemplateConfigs.Overrides.tag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateFleetRequest.LaunchTemplateConfigs.tag`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_launch_template_configs_tag]`
`Records.requestParameters.CreateFleetRequest.OnDemandOptions.AllocationStrategy`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_on_demand_options_allocation_strategy]`
`Records.requestParameters.CreateFleetRequest.SpotOptions.AllocationStrategy`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_spot_options_allocation_strategy]`
`Records.requestParameters.CreateFleetRequest.TagSpecification.ResourceType`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_tag_specification_resource_type]`
`Records.requestParameters.CreateFleetRequest.TagSpecification.Tag.Key`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_tag_specification_tag_key]`	Iterate through log field `Records.requestParameters.CreateFleetRequest.TagSpecification.Tag`, then `Records.requestParameters.CreateFleetRequest.TagSpecification.Tag.Key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.CreateFleetRequest.TagSpecification.Tag.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateFleetRequest.TagSpecification.Tag.value`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_tag_specification_tag_key]`	Iterate through log field `Records.requestParameters.CreateFleetRequest.TagSpecification.Tag`, then `Records.requestParameters.CreateFleetRequest.TagSpecification.Tag.Key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.CreateFleetRequest.TagSpecification.Tag.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateFleetRequest.TagSpecification.tag`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_tag_specification_tag]`
`Records.requestParameters.CreateFleetRequest.TargetCapacitySpecification.DefaultTargetCapacityType`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_target_capacity_specification_default_target_capacity_type]`
`Records.requestParameters.CreateFleetRequest.TargetCapacitySpecification.OnDemandTargetCapacity`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_target_capacity_specification_on_demand_target_capacity]`
`Records.requestParameters.CreateFleetRequest.TargetCapacitySpecification.SpotTargetCapacity`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_target_capacity_specification_spot_target_capacity]`
`Records.requestParameters.CreateFleetRequest.TargetCapacitySpecification.TotalTargetCapacity`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_target_capacity_specification_total_target_capacity]`
`Records.requestParameters.CreateFleetRequest.Type`	`target.resource.attribute.labels[records_request_parameters_create_fleet_request_type]`
`Records.responseElements.CreateFleetResponse.errorSet.item.errorMessage`	`security_result.description`
`Records.responseElements.CreateLaunchTemplateResponse.warning.errorSet.item.message`	`security_result.description`
`Records.responseElements.CreateFleetResponse.errorSet.item.lifecycle`	`target.resource.attribute.labels[records_response_elements_create_fleet_response_error_set_item_lifecycle]`
`Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceType`	`target.resource_ancestors.attribute.labels[records_response_elements_create_fleet_response_fleet_instance_set_item_instance_type]`	Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `records_response_elements_create_fleet_response_fleet_instance_set_item_instance_type` and `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.instanceType` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.launchTemplateSpecification.launchTemplateId`	`target.resource_ancestors.attribute.labels[records_response_elements_create_fleet_response_fleet_instance_set_item_launch_template_and_overrides_launch_template_specification_launch_template_id]`	Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `records_response_elements_create_fleet_response_fleet_instance_set_item_launch_template_and_overrides_launch_template_specification_launch_template_id` and `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.launchTemplateSpecification.launchTemplateId` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.launchTemplateSpecification.version`	`target.resource_ancestors.attribute.labels[records_response_elements_create_fleet_response_fleet_instance_set_item_launch_template_and_overrides_launch_template_specification_version]`	Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `records_response_elements_create_fleet_response_fleet_instance_set_item_launch_template_and_overrides_launch_template_specification_version` and `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.launchTemplateSpecification.version` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.overrides.availabilityZone`	`target.resource_ancestors.attribute.labels[records_response_elements_create_fleet_response_fleet_instance_set_item_launch_template_and_overrides_overrides_availability_zone]`	Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `records_response_elements_create_fleet_response_fleet_instance_set_item_overrides_availability_zone` and `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.overrides.availabilityZone` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.overrides.instanceType`	`target.resource_ancestors.attribute.labels[records_response_elements_create_fleet_response_fleet_instance_set_item_launch_template_and_overrides_overrides_instance_type]`	Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `records_response_elements_create_fleet_response_fleet_instance_set_item_overrides_instance_type` and `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.overrides.instanceType` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.overrides.priority`	`target.resource_ancestors.attribute.labels[records_response_elements_create_fleet_response_fleet_instance_set_item_launch_template_and_overrides_overrides_priority]`	Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `records_response_elements_create_fleet_response_fleet_instance_set_item_overrides_priority` and `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.overrides.priority` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.overrides.subnetId`	`target.resource_ancestors.attribute.labels[records_response_elements_create_fleet_response_fleet_instance_set_item_launch_template_and_overrides_overrides_subnet_id]`	Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `records_response_elements_create_fleet_response_fleet_instance_set_item_overrides_subnet_id` and `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.launchTemplateAndOverrides.overrides.subnetId` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.responseElements.CreateFleetResponse.requestId`	`target.resource.attribute.labels[records_response_elements_create_fleet_response_request_id]`
`Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.lifecycle`	`target.resource_ancestors.attribute.labels[records_response_elements_create_fleet_response_fleet_instance_set_item_lifecycle]`	Iterate through log field `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item`, then the `target.resource_ancestors.attribute.labels.key` UDM field is set to `records_response_elements_create_fleet_response_fleet_instance_set_item_lifecycle` and `Records.responseElements.CreateFleetResponse.fleetInstanceSet.item.lifecycle` log field is mapped to the `target.resource_ancestors.attribute.labels.value` UDM field.
`Records.requestParameters.CreateLaunchTemplateRequest.ClientToken`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_client_token]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.BlockDeviceMapping.DeviceName`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_block_device_mapping_device_name]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.BlockDeviceMapping.Ebs.DeleteOnTermination`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_block_device_mapping_ebs_delete_on_termination]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.BlockDeviceMapping.Ebs.Iops`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_block_device_mapping_ebs_iops]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.BlockDeviceMapping.Ebs.Throughput`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_block_device_mapping_ebs_throughput]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.BlockDeviceMapping.Ebs.VolumeSize`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_block_device_mapping_ebs_volume_size]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.BlockDeviceMapping.Ebs.VolumeType`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_block_device_mapping_ebs_volume_type]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.BlockDeviceMapping.tag`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_block_device_mapping_tag]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.DisableApiTermination`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_disable_api_termination]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.EbsOptimized`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_ebs_optimized]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.IamInstanceProfile.Arn`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_iam_instance_profile_arn]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.IamInstanceProfile.Name`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_iam_instance_profile_name]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.ImageId`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_image_id]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.InstanceType`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_instance_type]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.KeyName`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_key_name]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.MetadataOptions.HttpPutResponseHopLimit`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_metadata_options_http_put_response_hop_limit]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.MetadataOptions.HttpTokens`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_metadata_options_http_tokens]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.MetadataOptions.InstanceMetadataTags`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_metadata_options_instance_metadata_tags]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.Monitoring.Enabled`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_monitoring_enabled]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.NetworkInterface.AssociatePublicIpAddress`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_network_interface_associate_public_ip_address]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.NetworkInterface.DeviceIndex`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_network_interface_device_index]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.NetworkInterface.NetworkCardIndex`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_network_interface_network_card_index]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.NetworkInterface.SecurityGroupId.content`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_network_interface_security_group_id_content]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.NetworkInterface.SecurityGroupId.tag`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_network_interface_security_group_id_tag]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.NetworkInterface.SubnetId`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_network_interface_subnet_id]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.NetworkInterface.tag`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_network_interface_tag]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.SecurityGroupId.content`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_security_group_id_content]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.SecurityGroupId.tag`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_security_group_id_tag]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.TagSpecification.ResourceType`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_tag_specification_resource_type]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.TagSpecification.tag`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_tag_specification_tag]`
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.TagSpecification.Tag.Key`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_tag_specification_tag_key]`	Iterate through log field `Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.TagSpecification.Tag`, then `Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.TagSpecification.Tag.Key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.TagSpecification.Tag.Value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.TagSpecification.Tag.Value`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_tag_specification_tag_key]`	Iterate through log field `Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.TagSpecification.Tag`, then `Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.TagSpecification.Tag.Key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.TagSpecification.Tag.Value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateLaunchTemplateRequest.LaunchTemplateData.UserData`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_launch_template_data_user_data]`
`Records.requestParameters.CreateLaunchTemplateRequest.TagSpecification.ResourceType`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_tag_specification_resource_type]`
`Records.requestParameters.CreateLaunchTemplateRequest.TagSpecification.tag`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_tag_specification_tag]`
`Records.requestParameters.CreateLaunchTemplateRequest.TagSpecification.Tag.Key`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_tag_specification_tag_key]`	Iterate through log field `Records.requestParameters.CreateLaunchTemplateRequest.TagSpecification.Tag`, then `Records.requestParameters.CreateLaunchTemplateRequest.TagSpecification.Tag.Key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.CreateLaunchTemplateRequest.TagSpecification.Tag.Value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateLaunchTemplateRequest.TagSpecification.Tag.Value`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_tag_specification_tag_key]`	Iterate through log field `Records.requestParameters.CreateLaunchTemplateRequest.TagSpecification.Tag`, then `Records.requestParameters.CreateLaunchTemplateRequest.TagSpecification.Tag.Key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.CreateLaunchTemplateRequest.TagSpecification.Tag.Value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateLaunchTemplateRequest.VersionDescription`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_request_version_description]`
`Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.createdBy`	`target.resource.attribute.labels[records_response_elements_create_launch_template_response_launch_template_created_by]`
`Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.defaultVersionNumber`	`target.resource.attribute.labels[records_response_elements_create_launch_template_response_launch_template_default_version_number]`
`Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.latestVersionNumber`	`target.resource.attribute.labels[records_response_elements_create_launch_template_response_launch_template_latest_version_number]`
`Records.responseElements.CreateLaunchTemplateResponse.requestId`	`target.resource.attribute.labels[records_response_elements_create_launch_template_response_request_id]`
`Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.tagSet.item.key`	`target.resource.attribute.labels[records_response_elements_create_launch_template_response_launch_template_tag_set_item_key]`	Iterate through log field `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.tagSet.item`, then `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.tagSet.item.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.tagSet.item.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.tagSet.item.value`	`target.resource.attribute.labels[records_response_elements_create_launch_template_response_launch_template_tag_set_item_key]`	Iterate through log field `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.tagSet.item`, then `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.tagSet.item.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.CreateLaunchTemplateResponse.launchTemplate.tagSet.item.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.BlockDeviceMapping.DeviceName`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_block_device_mapping_device_name]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.BlockDeviceMapping.Ebs.Iops`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_block_device_mapping_ebs_iops]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.BlockDeviceMapping.Ebs.Throughput`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_block_device_mapping_ebs_throughput]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.BlockDeviceMapping.Ebs.VolumeSize`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_block_device_mapping_ebs_volume_size]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.BlockDeviceMapping.Ebs.VolumeType`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_block_device_mapping_ebs_volume_type]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.BlockDeviceMapping.tag`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_block_device_mapping_tag]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.DisableApiTermination`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_disable_api_termination]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.IamInstanceProfile.Arn`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_iam_instance_profile_arn]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.IamInstanceProfile.Name`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_iam_instance_profile_name]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.ImageId`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_image_id]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.InstanceType`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_instance_type]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.KeyName`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_key_name]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.MetadataOptions.HttpPutResponseHopLimit`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_metadata_options_http_put_response_hop_limit]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.MetadataOptions.HttpTokens`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_metadata_options_http_tokens]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.MetadataOptions.InstanceMetadataTags`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_metadata_options_instance_metadata_tags]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.Monitoring.Enabled`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_monitoring_enabled]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.NetworkInterface.AssociatePublicIpAddress`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_network_interface_associate_public_ip_address]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.NetworkInterface.DeviceIndex`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_network_interface_device_index]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.NetworkInterface.SecurityGroupId.content`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_network_interface_security_group_id_content]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.NetworkInterface.SecurityGroupId.tag`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_network_interface_security_group_id_tag]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.NetworkInterface.SubnetId`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_network_interface_subnet_id]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.NetworkInterface.tag`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_network_interface_tag]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.SecurityGroupId.content`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_security_group_id_content]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.SecurityGroupId.tag`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_security_group_id_tag]`
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.TagSpecification.ResourceType`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_tag_specification_resource_type]`	Iterate through log field `Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.TagSpecification`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_create_launch_template_version_request_launch_template_data_tag_specification_resource_type` and `Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.TagSpecification.ResourceType` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.TagSpecification.tag`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_tag_specification_tag]`	Iterate through log field `Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.TagSpecification`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_create_launch_template_version_request_launch_template_data_tag_specification_tag` and `Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.TagSpecification.tag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateLaunchTemplateVersionRequest.LaunchTemplateData.UserData`	`target.resource.attribute.labels[records_request_parameters_create_launch_template_version_request_launch_template_data_user_data]`
`Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.createdBy`	`target.resource.attribute.labels[records_response_elements_create_launch_template_version_response_launch_template_version_created_by]`
`Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.defaultVersion`	`target.resource.attribute.labels[records_response_elements_create_launch_template_version_response_launch_template_version_default_version]`
`Records.responseElements.CreateLaunchTemplateVersionResponse.launchTemplateVersion.versionNumber`	`target.resource.attribute.labels[records_response_elements_create_launch_template_version_response_launch_template_version_version_number]`
`Records.responseElements.CreateLaunchTemplateVersionResponse.requestId`	`target.resource.attribute.labels[records_response_elements_create_launch_template_version_response_request_id]`
`Records.requestParameters.CreateNetworkInsightsAccessScopeRequest.ClientToken`	`target.resource.attribute.labels[records_request_parameters_create_network_insights_access_scope_request_client_token]`
`Records.requestParameters.CreateNetworkInsightsAccessScopeRequest.MatchPath.Destination.ResourceStatement.Resource.content`	`target.resource.attribute.labels[records_request_parameters_create_network_insights_access_scope_request_match_path_destination_resource_statement_resource_content]`
`Records.requestParameters.CreateNetworkInsightsAccessScopeRequest.MatchPath.Destination.ResourceStatement.Resource.tag`	`target.resource.attribute.labels[records_request_parameters_create_network_insights_access_scope_request_match_path_destination_resource_statement_resource_tag]`
`Records.requestParameters.CreateNetworkInsightsAccessScopeRequest.MatchPath.Destination.ResourceStatement.ResourceType.content`	`target.resource.attribute.labels[records_request_parameters_create_network_insights_access_scope_request_match_path_destination_resource_statement_resource_type_content]`
`Records.requestParameters.CreateNetworkInsightsAccessScopeRequest.MatchPath.Destination.ResourceStatement.ResourceType.tag`	`target.resource.attribute.labels[records_request_parameters_create_network_insights_access_scope_request_match_path_destination_resource_statement_resource_type_tag]`
`Records.requestParameters.CreateNetworkInsightsAccessScopeRequest.MatchPath.Source.PacketHeaderStatement.DestinationPort.content`	`target.resource.attribute.labels[records_request_parameters_create_network_insights_access_scope_request_match_path_source_packet_header_statement_destination_port_content]`
`Records.requestParameters.CreateNetworkInsightsAccessScopeRequest.MatchPath.Source.PacketHeaderStatement.DestinationPort.tag`	`target.resource.attribute.labels[records_request_parameters_create_network_insights_access_scope_request_match_path_source_packet_header_statement_destination_port_tag]`
`Records.requestParameters.CreateNetworkInsightsAccessScopeRequest.MatchPath.Source.ResourceStatement.Resource.content`	`target.resource.attribute.labels[records_request_parameters_create_network_insights_access_scope_request_match_path_source_resource_statement_resource_content]`	Iterate through log field `Records.requestParameters.CreateNetworkInsightsAccessScopeRequest.MatchPath.Source.ResourceStatement.Resource`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_create_network_insights_access_scope_request_match_path_source_resource_statement_resource_content` and `Records.requestParameters.CreateNetworkInsightsAccessScopeRequest.MatchPath.Source.ResourceStatement.Resource.content` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateNetworkInsightsAccessScopeRequest.MatchPath.Source.ResourceStatement.Resource.tag`	`target.resource.attribute.labels[records_request_parameters_create_network_insights_access_scope_request_match_path_source_resource_statement_resource_tag]`	Iterate through log field `Records.requestParameters.CreateNetworkInsightsAccessScopeRequest.MatchPath.Source.ResourceStatement.Resource`, then the `target.resource.attribute.labels.key` UDM field is set to `records_request_parameters_create_network_insights_access_scope_request_match_path_source_resource_statement_tag` and `Records.requestParameters.CreateNetworkInsightsAccessScopeRequest.MatchPath.Source.ResourceStatement.Resource.tag` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.CreateNetworkInsightsAccessScopeRequest.MatchPath.tag`	`target.resource.attribute.labels[records_request_parameters_create_network_insights_access_scope_request_match_path_tag]`
`Records.responseElements.CreateNetworkInsightsAccessScopeResponse.requestId`	`target.resource.attribute.labels[records_response_elements_create_network_insights_access_scope_response_request_id]`
`Records.requestParameters.CreateNetworkInsightsPathRequest.ClientToken`	`target.resource.attribute.labels[records_request_parameters_create_network_insights_path_request_client_token]`
`Records.requestParameters.CreateNetworkInsightsPathRequest.FilterAtSource.DestinationAddress`	`target.resource.attribute.labels[records_request_parameters_create_network_insights_path_request_filter_at_source_destination_address]`
`Records.requestParameters.CreateNetworkInsightsPathRequest.FilterAtSource.DestinationPortRange.FromPort`	`target.resource.attribute.labels[records_request_parameters_create_network_insights_path_request_filter_at_source_destination_port_range_from_port]`
`Records.requestParameters.CreateNetworkInsightsPathRequest.FilterAtSource.DestinationPortRange.ToPort`	`target.resource.attribute.labels[records_request_parameters_create_network_insights_path_request_filter_at_source_destination_port_range_to_port]`
`Records.requestParameters.CreateNetworkInsightsPathRequest.Protocol`	`target.resource.attribute.labels[records_request_parameters_create_network_insights_path_request_protocol]`
`Records.requestParameters.CreateNetworkInsightsPathRequest.Source`	`target.resource.attribute.labels[records_request_parameters_create_network_insights_path_request_source]`
`Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.destination`	`target.resource.attribute.labels[records_response_elements_create_network_insights_path_response_network_insights_path_destination]`
`Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.destinationArn`	`target.resource.attribute.labels[records_response_elements_create_network_insights_path_response_network_insights_path_destination_arn]`
`Records.responseElements.CreateNetworkInsightsPathResponse.requestId`	`target.resource.attribute.labels[records_response_elements_create_network_insights_path_response_request_id]`
`Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.protocol`	`target.resource.attribute.labels[records_response_elements_create_network_insights_path_response_network_insights_path_protocol]`
`Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.source`	`target.resource.attribute.labels[records_response_elements_create_network_insights_path_response_network_insights_path_source]`
`Records.responseElements.CreateNetworkInsightsPathResponse.networkInsightsPath.sourceArn`	`target.resource.attribute.labels[records_response_elements_create_network_insights_path_response_network_insights_path_source_arn]`
`Records.requestParameters.CreateSnapshotsRequest.CopyTagsFromSource`	`target.resource.attribute.labels[records_request_parameters_create_snapshots_request_copy_tags_from_source]`
`Records.requestParameters.CreateSnapshotsRequest.Description`	`target.resource.attribute.labels[records_request_parameters_create_snapshots_request_description]`
`Records.requestParameters.CreateSnapshotsRequest.InstanceSpecification.ExcludeBootVolume`	`target.resource.attribute.labels[records_request_parameters_create_snapshots_request_instance_specification_exclude_boot_volume]`
`Records.requestParameters.CreateSnapshotsRequest.InstanceSpecification.InstanceId`	`target.resource.attribute.labels[records_request_parameters_create_snapshots_request_instance_specification_instance_id]`
`Records.responseElements.CreateSnapshotsResponse.requestId`	`target.resource.attribute.labels[records_response_elements_create_snapshots_response_request_id]`
`Records.responseElements.CreateSnapshotsResponse.snapshotSet.item.description`	`target.resource.attribute.labels[records_response_elements_create_snapshots_response_snapshot_set_item_description]`
`Records.responseElements.CreateSnapshotsResponse.snapshotSet.item.encrypted`	`target.resource.attribute.labels[records_response_elements_create_snapshots_response_snapshot_set_item_encrypted]`
`Records.responseElements.CreateSnapshotsResponse.snapshotSet.item.ownerId`	`target.resource.attribute.labels[records_response_elements_create_snapshots_response_snapshot_set_item_owner_id]`
`Records.responseElements.CreateSnapshotsResponse.snapshotSet.item.volumeSize`	`target.resource.attribute.labels[records_response_elements_create_snapshots_response_snapshot_set_item_volume_size]`
`Records.responseElements.CreateSnapshotsResponse.snapshotSet.item.volumeId`	`target.resource.attribute.labels[records_response_elements_create_snapshots_response_snapshot_set_item_volume_id]`
`Records.responseElements.CreateSnapshotsResponse.snapshotSet.item.state`	`target.resource.attribute.labels[records_response_elements_create_snapshots_response_snapshot_set_item_state]`
`Records.responseElements.CreateSnapshotsResponse.snapshotSet.item.startTime`	`target.resource.attribute.labels[records_response_elements_create_snapshots_response_snapshot_set_item_start_time]`
`Records.requestParameters.instanceOSUser`	`target.resource.attribute.labels[records_request_parameters_instance_osuser]`
`Records.requestParameters.sSHPublicKey`	`target.resource.attribute.labels[records_request_parameters_s_shpublic_key]`
`Records.responseElements.success`	`target.resource.attribute.labels[records_response_elements_success]`
`Records.responseElements.vpnConnection.category`	`target.resource.attribute.labels[records_response_elements_vpn_connection_category]`
`Records.responseElements.vpnConnection.state`	`target.resource.attribute.labels[records_response_elements_vpn_connection_state]`
`Records.responseElements.vpnConnection.options.tunnelOptionSet.items.tunnelInsideCidr`	`target.resource.attribute.labels[records_response_elements_vpn_connection_options_tunnel_option_set_items_tunnel_inside_cidr]`	Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpn_connection_options_tunnel_option_set_items_tunnel_inside_cid` and `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.tunnelInsideCidr` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpnConnection.options.tunnelOptionSet.items.startupAction`	`target.resource.attribute.labels[records_response_elements_vpn_connection_options_tunnel_option_set_items_startup_action]`	Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpn_connection_options_tunnel_option_set_items_startup_action` and `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.startupAction` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpnConnection.options.tunnelOptionSet.items.preSharedKey`	`target.resource.attribute.labels[records_response_elements_vpn_connection_options_tunnel_option_set_items_pre_shared_key]`	Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpn_connection_options_tunnel_option_set_items_pre_shared_key` and `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.preSharedKey` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpnConnection.options.tunnelOptionSet.items.phase2LifetimeSeconds`	`target.resource.attribute.labels[records_response_elements_vpn_connection_options_tunnel_option_set_items_phase2lifetime_seconds]`	Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpn_connection_options_tunnel_option_set_items_phase2lifetime_seconds` and `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.phase2LifetimeSeconds` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpnConnection.options.tunnelOptionSet.items.phase2IntegrityAlgorithmSet.items.value`	`target.resource.attribute.labels[records_response_elements_vpn_connection_options_tunnel_option_set_items_phase2integrity_algorithm_set_items_value]`	Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items`, then Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.phase2IntegrityAlgorithmSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpn_connection_options_tunnel_option_set_items_phase2_integrity_algorithm_set_items_value` and `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.phase2IntegrityAlgorithmSet.items.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpnConnection.options.tunnelOptionSet.items.phase2EncryptionAlgorithmSet.items.value`	`target.resource.attribute.labels[records_response_elements_vpn_connection_options_tunnel_option_set_items_phase2encryption_algorithm_set_items_value]`	Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items`, then Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.phase2EncryptionAlgorithmSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpn_connection_options_tunnel_option_set_items_phase2_encryption_algorithm_set_items_value` and `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.phase2EncryptionAlgorithmSet.items.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpnConnection.options.tunnelOptionSet.items.dpdTimeoutAction`	`target.resource.attribute.labels[records_response_elements_vpn_connection_options_tunnel_option_set_items_dpd_timeout_action]`	Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpn_connection_options_tunnel_option_set_items_dpd_timeout_action` and `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.dpdTimeoutAction` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpnConnection.options.tunnelOptionSet.items.enableTunnelLifecycleControl`	`target.resource.attribute.labels[records_response_elements_vpn_connection_options_tunnel_option_set_items_enable_tunnel_lifecycle_control]`	Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpn_connection_options_tunnel_option_set_items_enable_tunnel_lifecycle_control` and `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.enableTunnelLifecycleControl` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpnConnection.options.tunnelOptionSet.items.ikeVersionSet.items.value`	`target.resource.attribute.labels[records_response_elements_vpn_connection_options_tunnel_option_set_items_ike_version_set_items_value]`	Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items`, then Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.ikeVersionSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpn_connection_options_tunnel_option_set_items_ike_version_set_items_value` and `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.ikeVersionSet.items.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpnConnection.options.tunnelOptionSet.items.logOptions.cloudWatchLogOptions.logEnabled`	`target.resource.attribute.labels[records_response_elements_vpn_connection_options_tunnel_option_set_items_log_options_cloud_watch_log_options_log_enabled]`	Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpn_connection_options_tunnel_option_set_items_log_options_cloud_watch_log_options_log_enabled` and `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.logOptions.cloudWatchLogOptions.logEnabled` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpnConnection.options.tunnelOptionSet.items.logOptions.cloudWatchLogOptions.logGroupArn`	`target.resource.attribute.labels[records_response_elements_vpn_connection_options_tunnel_option_set_items_log_options_cloud_watch_log_options_log_group_arn]`	Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpn_connection_options_tunnel_option_set_items_log_options_cloud_watch_log_options_log_group_arn` and `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.logOptions.cloudWatchLogOptions.logGroupArn` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpnConnection.options.tunnelOptionSet.items.logOptions.cloudWatchLogOptions.logOutputFormat`	`target.resource.attribute.labels[records_response_elements_vpn_connection_options_tunnel_option_set_items_log_options_cloud_watch_log_options_log_output_format]`	Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpn_connection_options_tunnel_option_set_items_log_options_cloud_watch_log_options_log_output_format` and `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.logOptions.cloudWatchLogOptions.logOutputFormat` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpnConnection.options.tunnelOptionSet.items.outsideIpAddress`	`target.resource.attribute.labels[records_response_elements_vpn_connection_options_tunnel_option_set_items_outside_ip_address]`	Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpn_connection_options_tunnel_option_set_items_outside_ip_address` and `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.outsideIpAddress` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpnConnection.options.tunnelOptionSet.items.phase1DHGroupNumberSet.items.value`	`target.resource.attribute.labels[records_response_elements_vpn_connection_options_tunnel_option_set_items_phase1dhgroup_number_set_items_value]`	Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items`, then Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.phase1DHGroupNumberSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpn_connection_options_tunnel_option_set_items_phase_1_dhgroup_number_set_items_value` and `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.phase1DHGroupNumberSet.items.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpnConnection.options.tunnelOptionSet.items.phase1EncryptionAlgorithmSet.items.value`	`target.resource.attribute.labels[records_response_elements_vpn_connection_options_tunnel_option_set_items_phase1encryption_algorithm_set_items_value]`	Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items`, then Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.phase1EncryptionAlgorithmSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpn_connection_options_tunnel_option_set_items_phase1_encryption_algorithm_set_items_value` and `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.phase1EncryptionAlgorithmSet.items.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpnConnection.options.tunnelOptionSet.items.phase1IntegrityAlgorithmSet.items.value`	`target.resource.attribute.labels[records_response_elements_vpn_connection_options_tunnel_option_set_items_phase1integrity_algorithm_set_items_value]`	Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items`, then Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.phase1IntegrityAlgorithmSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpn_connection_options_tunnel_option_set_items_phase1_integrity_algorithm_set_items_value` and `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.phase1IntegrityAlgorithmSet.items.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpnConnection.options.tunnelOptionSet.items.phase2DHGroupNumberSet.items.value`	`target.resource.attribute.labels[records_response_elements_vpn_connection_options_tunnel_option_set_items_phase2dhgroup_number_set_items_value]`	Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items`, then Iterate through log field `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.phase2DHGroupNumberSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `records_response_elements_vpn_connection_options_tunnel_option_set_items_phase_2_dhgroup_number_set_items_value` and `Records.responseElements.vpnConnection.options.tunnelOptionSet.items.phase2DHGroupNumberSet.items.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.amiLaunchIndex`	`target.resource.attribute.labels[records_response_elements_instances_set_items_ami_launch_index]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `ami_launch_index` and `Records.responseElements.instancesSet.items.amiLaunchIndex` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `ami_launch_index` and `Records.responseElements.instancesSet.items.amiLaunchIndex` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.architecture`	`target.resource.attribute.labels[records_response_elements_instances_set_items_architecture]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `architecture` and `Records.responseElements.instancesSet.items.architecture` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `architecture` and `Records.responseElements.instancesSet.items.architecture` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.bootMode`	`target.resource.attribute.labels[records_response_elements_instances_set_items_boot_mode]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `boot_mode` and `Records.responseElements.instancesSet.items.bootMode` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `boot_mode` and `Records.responseElements.instancesSet.items.bootMode` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.capacityReservationSpecification.capacityReservationPreference`	`target.resource.attribute.labels[records_response_elements_instances_set_items_capacity_reservation_specification_capacity_reservation_preference]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `capacityReservationSpecification_capacityReservationPreference` and `Records.responseElements.instancesSet.items.capacityReservationSpecification.capacityReservationPreference` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `capacityReservationSpecification_capacityReservationPreference` and `Records.responseElements.instancesSet.items.capacityReservationSpecification.capacityReservationPreference` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.clientToken`	`target.resource.attribute.labels[records_response_elements_instances_set_items_client_token]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `clientToken` and `Records.responseElements.instancesSet.items.clientToken` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `clientToken` and `Records.responseElements.instancesSet.items.clientToken` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.cpuOptions.coreCount`	`target.resource.attribute.labels[records_response_elements_instances_set_items_cpu_options_core_count]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `cpuOptions_coreCount` and `Records.responseElements.instancesSet.items.cpuOptions.coreCount` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `cpuOptions_coreCount` and `Records.responseElements.instancesSet.items.cpuOptions.coreCount` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.cpuOptions.threadsPerCore`	`target.resource.attribute.labels[records_response_elements_instances_set_items_cpu_options_threads_per_core]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `cpuOptions_threadsPerCore` and `Records.responseElements.instancesSet.items.cpuOptions.threadsPerCore` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `cpuOptions_threadsPerCore` and `Records.responseElements.instancesSet.items.cpuOptions.threadsPerCore` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.currentInstanceBootMode`	`target.resource.attribute.labels[records_response_elements_instances_set_items_current_instance_boot_mode]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `currentInstanceBootMode` and `Records.responseElements.instancesSet.items.currentInstanceBootMode` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `currentInstanceBootMode` and `Records.responseElements.instancesSet.items.currentInstanceBootMode` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.ebsOptimized`	`target.resource.attribute.labels[records_response_elements_instances_set_items_ebs_optimized]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `ebsOptimized` and `Records.responseElements.instancesSet.items.ebsOptimized` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `ebsOptimized` and `Records.responseElements.instancesSet.items.ebsOptimized` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.enaSupport`	`target.resource.attribute.labels[records_response_elements_instances_set_items_ena_support]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `enaSupport` and `Records.responseElements.instancesSet.items.enaSupport` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `enaSupport` and `Records.responseElements.instancesSet.items.enaSupport` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.enclaveOptions.enabled`	`target.resource.attribute.labels[records_response_elements_instances_set_items_enclave_options_enabled]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `enclaveOptions_enabled` and `Records.responseElements.instancesSet.items.enclaveOptions.enabled` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `enclaveOptions_enabled` and `Records.responseElements.instancesSet.items.enclaveOptions.enabled` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.hibernationOptions.configured`	`target.resource.attribute.labels[records_response_elements_instances_set_items_hibernation_options_configured]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `hibernationOptions_configured` and `Records.responseElements.instancesSet.items.hibernationOptions.configured` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `hibernationOptions_configured` and `Records.responseElements.instancesSet.items.hibernationOptions.configured` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.hypervisor`	`target.resource.attribute.labels[records_response_elements_instances_set_items_hypervisor]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `hypervisor` and `Records.responseElements.instancesSet.items.hypervisor` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `hypervisor` and `Records.responseElements.instancesSet.items.hypervisor` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.instanceLifecycle`	`target.resource.attribute.labels[records_response_elements_instances_set_items_instance_lifecycle]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `instanceLifecycle` and `Records.responseElements.instancesSet.items.instanceLifecycle` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `instanceLifecycle` and `Records.responseElements.instancesSet.items.instanceLifecycle` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.instanceState.code`	`target.resource.attribute.labels[records_response_elements_instances_set_items_instance_state_code]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `instanceState_code` and `Records.responseElements.instancesSet.items.instanceState.code` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `instanceState_code` and `Records.responseElements.instancesSet.items.instanceState.code` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.instanceState.name`	`target.resource.attribute.labels[records_response_elements_instances_set_items_instance_state_name]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `instanceState_name` and `Records.responseElements.instancesSet.items.instanceState.name` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `instanceState_name` and `Records.responseElements.instancesSet.items.instanceState.name` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.instanceType`	`target.resource.attribute.labels[records_response_elements_instances_set_items_instance_type]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `instanceType` and `Records.responseElements.instancesSet.items.instanceType` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `instanceType` and `Records.responseElements.instancesSet.items.instanceType` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.keyName`	`target.resource.attribute.labels[records_response_elements_instances_set_items_key_name]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `items_keyName` and `Records.responseElements.instancesSet.items.keyName` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `items_keyName` and `Records.responseElements.instancesSet.items.keyName` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.launchTime`	`target.resource.attribute.labels[records_response_elements_instances_set_items_launch_time]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `launchTime` and `Records.responseElements.instancesSet.items.launchTime` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `launchTime` and `Records.responseElements.instancesSet.items.launchTime` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.maintenanceOptions.autoRecovery`	`target.resource.attribute.labels[records_response_elements_instances_set_items_maintenance_options_auto_recovery]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `maintenanceOptions_autoRecovery` and `Records.responseElements.instancesSet.items.maintenanceOptions.autoRecovery` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `maintenanceOptions_autoRecovery` and `Records.responseElements.instancesSet.items.maintenanceOptions.autoRecovery` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.metadataOptions.httpEndpoint`	`target.resource.attribute.labels[records_response_elements_instances_set_items_metadata_options_http_endpoint]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `metadataOptions_httpEndpoint` and `Records.responseElements.instancesSet.items.metadataOptions.httpEndpoint` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `metadataOptions_httpEndpoint` and `Records.responseElements.instancesSet.items.metadataOptions.httpEndpoint` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.metadataOptions.httpProtocolIpv4`	`target.resource.attribute.labels[records_response_elements_instances_set_items_metadata_options_http_protocol_ipv4]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `metadataOptions_httpProtocolIpv4` and `Records.responseElements.instancesSet.items.metadataOptions.httpProtocolIpv4` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `metadataOptions_httpProtocolIpv4` and `Records.responseElements.instancesSet.items.metadataOptions.httpProtocolIpv4` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.metadataOptions.httpProtocolIpv6`	`target.resource.attribute.labels[records_response_elements_instances_set_items_metadata_options_http_protocol_ipv6]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `metadataOptions_httpProtocolIpv6` and `Records.responseElements.instancesSet.items.metadataOptions.httpProtocolIpv6` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `metadataOptions_httpProtocolIpv6` and `Records.responseElements.instancesSet.items.metadataOptions.httpProtocolIpv6` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.metadataOptions.httpPutResponseHopLimit`	`target.resource.attribute.labels[records_response_elements_instances_set_items_metadata_options_http_put_response_hop_limit]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `metadataOptions_httpPutResponseHopLimit` and `Records.responseElements.instancesSet.items.metadataOptions.httpPutResponseHopLimit` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `metadataOptions_httpPutResponseHopLimit` and `Records.responseElements.instancesSet.items.metadataOptions.httpPutResponseHopLimit` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.metadataOptions.httpTokens`	`target.resource.attribute.labels[records_response_elements_instances_set_items_metadata_options_http_tokens]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `metadataOptions_httpTokens` and `Records.responseElements.instancesSet.items.metadataOptions.httpTokens` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `metadataOptions_httpTokens` and `Records.responseElements.instancesSet.items.metadataOptions.httpTokens` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.metadataOptions.instanceMetadataTags`	`target.resource.attribute.labels[records_response_elements_instances_set_items_metadata_options_instance_metadata_tags]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `metadataOptions_instanceMetadataTags` and `Records.responseElements.instancesSet.items.metadataOptions.instanceMetadataTags` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `metadataOptions_instanceMetadataTags` and `Records.responseElements.instancesSet.items.metadataOptions.instanceMetadataTags` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.metadataOptions.state`	`target.resource.attribute.labels[records_response_elements_instances_set_items_metadata_options_state]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `metadataOptions_state` and `Records.responseElements.instancesSet.items.metadataOptions.state` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `metadataOptions_state` and `Records.responseElements.instancesSet.items.metadataOptions.state` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.monitoring.state`	`target.resource.attribute.labels[records_response_elements_instances_set_items_monitoring_state]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `monitoring_state` and `Records.responseElements.instancesSet.items.monitoring.state` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `monitoring_state` and `Records.responseElements.instancesSet.items.monitoring.state` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.placement.tenancy`	`target.resource.attribute.labels[records_response_elements_instances_set_items_placement_tenancy]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `placement_tenancy` and `Records.responseElements.instancesSet.items.placement.tenancy` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `placement_tenancy` and `Records.responseElements.instancesSet.items.placement.tenancy` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.platform`	`target.resource.attribute.labels[records_response_elements_instances_set_items_platform]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `platform` and `Records.responseElements.instancesSet.items.platform` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `platform` and `Records.responseElements.instancesSet.items.platform` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.privateDnsNameOptions.enableResourceNameDnsAAAARecord`	`target.resource.attribute.labels[records_response_elements_instances_set_items_private_dns_name_options_enable_resource_name_dns_aaaarecord]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `privateDnsNameOptions_enableResourceNameDnsAAAARecord` and `Records.responseElements.instancesSet.items.privateDnsNameOptions.enableResourceNameDnsAAAARecord` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `privateDnsNameOptions_enableResourceNameDnsAAAARecord` and `Records.responseElements.instancesSet.items.privateDnsNameOptions.enableResourceNameDnsAAAARecord` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.privateDnsNameOptions.enableResourceNameDnsARecord`	`target.resource.attribute.labels[records_response_elements_instances_set_items_private_dns_name_options_enable_resource_name_dns_arecord]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `privateDnsNameOptions_enableResourceNameDnsARecord` and `Records.responseElements.instancesSet.items.privateDnsNameOptions.enableResourceNameDnsARecord` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `privateDnsNameOptions_enableResourceNameDnsARecord` and `Records.responseElements.instancesSet.items.privateDnsNameOptions.enableResourceNameDnsARecord` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.privateDnsNameOptions.hostnameType`	`target.resource.attribute.labels[records_response_elements_instances_set_items_private_dns_name_options_hostname_type]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `privateDnsNameOptions_hostnameType` and `Records.responseElements.instancesSet.items.privateDnsNameOptions.hostnameType` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `privateDnsNameOptions_hostnameType` and `Records.responseElements.instancesSet.items.privateDnsNameOptions.hostnameType` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.rootDeviceName`	`target.resource.attribute.labels[records_response_elements_instances_set_items_root_device_name]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `rootDeviceName` and `Records.responseElements.instancesSet.items.rootDeviceName` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `rootDeviceName` and `Records.responseElements.instancesSet.items.rootDeviceName` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.rootDeviceType`	`target.resource.attribute.labels[records_response_elements_instances_set_items_root_device_type]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `rootDeviceType` and `Records.responseElements.instancesSet.items.rootDeviceType` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `rootDeviceType` and `Records.responseElements.instancesSet.items.rootDeviceType` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.sourceDestCheck`	`target.resource.attribute.labels[records_response_elements_instances_set_items_source_dest_check]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `sourceDestCheck` and `Records.responseElements.instancesSet.items.sourceDestCheck` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `sourceDestCheck` and `Records.responseElements.instancesSet.items.sourceDestCheck` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.spotInstanceRequestId`	`target.resource.attribute.labels[records_response_elements_instances_set_items_spot_instance_request_id]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `spotInstanceRequestId` and `Records.responseElements.instancesSet.items.spotInstanceRequestId` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `spotInstanceRequestId` and `Records.responseElements.instancesSet.items.spotInstanceRequestId` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.stateReason.code`	`target.resource.attribute.labels[records_response_elements_instances_set_items_state_reason_code]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `stateReason_code` and `Records.responseElements.instancesSet.items.stateReason.code` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `stateReason_code` and `Records.responseElements.instancesSet.items.stateReason.code` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.stateReason.message`	`target.resource.attribute.labels[records_response_elements_instances_set_items_state_reason_message]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `stateReason_message` and `Records.responseElements.instancesSet.items.stateReason.message` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `stateReason_message` and `Records.responseElements.instancesSet.items.stateReason.message` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.subnetId`	`target.resource.attribute.labels[records_response_elements_instances_set_items_subnet_id]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `subnetId` and `Records.responseElements.instancesSet.items.subnetId` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `subnetId` and `Records.responseElements.instancesSet.items.subnetId` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.virtualizationType`	`target.resource.attribute.labels[records_response_elements_instances_set_items_virtualization_type]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `virtualizationType` and `Records.responseElements.instancesSet.items.virtualizationType` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `virtualizationType` and `Records.responseElements.instancesSet.items.virtualizationType` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.vpcId`	`target.resource.attribute.labels[records_response_elements_instances_set_items_vpc_id]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, the `target.resource.attribute.labels.key` UDM field is set to `vpcId` and `Records.responseElements.instancesSet.items.vpcId` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `about.resource.attribute.labels.key` UDM field is set to `vpcId` and `Records.responseElements.instancesSet.items.vpcId` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.reservationId`	`target.resource.attribute.labels[records_response_elements_reservation_id]`
`Records.responseElements.requesterId`	`target.resource.attribute.labels[records_response_elements_requester_id]`
`Records.responseElements.instancesSet.items.networkInterfaceSet.items.association.ipOwnerId`	`target.resource.attribute.labels[records_response_elements_instances_set_items_network_interface_set_items_association_ip_owner_id]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_association_ipOwnerId` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.association.ipOwnerId` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_association_ipOwnerId` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.association.ipOwnerId` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.networkInterfaceSet.items.association.publicDnsName`	`target.resource.attribute.labels[records_response_elements_instances_set_items_network_interface_set_items_association_public_dns_name]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_publicDnsName` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.association.publicDnsName` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_publicDnsName` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.association.publicDnsName` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.networkInterfaceSet.items.association.publicIp`	`target.resource.attribute.labels[records_response_elements_instances_set_items_network_interface_set_items_association_public_ip]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_association_publicIp` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.association.publicIp` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_association_publicIp` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.association.publicIp` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.networkInterfaceSet.items.attachment.attachmentId`	`target.resource.attribute.labels[records_response_elements_instances_set_items_network_interface_set_items_attachment_attachment_id]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_attachment_attachmentId` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.attachment.attachmentId` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_attachment_attachmentId` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.attachment.attachmentId` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.networkInterfaceSet.items.attachment.attachTime`	`target.resource.attribute.labels[records_response_elements_instances_set_items_network_interface_set_items_attachment_attach_time]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_attachment_attachTime` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.attachment.attachTime` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_attachment_attachTime` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.attachment.attachTime` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.networkInterfaceSet.items.attachment.deleteOnTermination`	`target.resource.attribute.labels[records_response_elements_instances_set_items_network_interface_set_items_attachment_delete_on_termination]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_attachment_deleteOnTermination` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.attachment.deleteOnTermination` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_attachment_deleteOnTermination` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.attachment.deleteOnTermination` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.networkInterfaceSet.items.attachment.deviceIndex`	`target.resource.attribute.labels[records_response_elements_instances_set_items_network_interface_set_items_attachment_device_index]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_attachment_deviceIndex` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.attachment.deviceIndex` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_attachment_deviceIndex` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.attachment.deviceIndex` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.networkInterfaceSet.items.attachment.networkCardIndex`	`target.resource.attribute.labels[records_response_elements_instances_set_items_network_interface_set_items_attachment_network_card_index]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_attachment_networkCardIndex` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.attachment.networkCardIndex` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_attachment_networkCardIndex` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.attachment.networkCardIndex` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.networkInterfaceSet.items.attachment.status`	`target.resource.attribute.labels[records_response_elements_instances_set_items_network_interface_set_items_attachment_status]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_attachment_status` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.attachment.status` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_attachment_status` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.attachment.status` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.networkInterfaceSet.items.description`	`target.resource.attribute.labels[records_response_elements_instances_set_items_network_interface_set_items_description]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_description` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.description` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_description` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.description` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.networkInterfaceSet.items.interfaceType`	`target.resource.attribute.labels[records_response_elements_instances_set_items_network_interface_set_items_interface_type]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_interfaceType` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.interfaceType` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_interfaceType` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.interfaceType` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.networkInterfaceSet.items.macAddress`	`target.resource.attribute.labels[records_response_elements_instances_set_items_network_interface_set_items_mac_address]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_macAddress` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.macAddress` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_macAddress` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.macAddress` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.networkInterfaceSet.items.networkInterfaceId`	`target.resource.attribute.labels[records_response_elements_instances_set_items_network_interface_set_items_network_interface_id]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_networkInterfaceId` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.networkInterfaceId` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_networkInterfaceId` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.networkInterfaceId` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.networkInterfaceSet.items.ownerId`	`target.resource.attribute.labels[records_response_elements_instances_set_items_network_interface_set_items_owner_id]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_ownerId` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.ownerId` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_ownerId` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.ownerId` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.networkInterfaceSet.items.privateDnsName`	`target.resource.attribute.labels[records_response_elements_instances_set_items_network_interface_set_items_private_dns_name]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_privateDnsName` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.privateDnsName` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_privateDnsName` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.privateDnsName` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.networkInterfaceSet.items.sourceDestCheck`	`target.resource.attribute.labels[records_response_elements_instances_set_items_network_interface_set_items_source_dest_check]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_sourceDestCheck` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.sourceDestCheck` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_sourceDestCheck` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.sourceDestCheck` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.networkInterfaceSet.items.status`	`target.resource.attribute.labels[records_response_elements_instances_set_items_network_interface_set_items_status]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_status` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.status` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_status` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.status` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.networkInterfaceSet.items.subnetId`	`target.resource.attribute.labels[records_response_elements_instances_set_items_network_interface_set_items_subnet_id]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_subnetId` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.subnetId` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_subnetId` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.subnetId` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.networkInterfaceSet.items.vpcId`	`target.resource.attribute.labels[records_response_elements_instances_set_items_network_interface_set_items_vpc_id]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_vpcId` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.vpcId` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_vpcId` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.vpcId` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.groupSet.items.groupId`	`target.resource.attribute.labels[records_response_elements_instances_set_items_group_set_items_group_id]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.groupSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `groupSet_items_groupId` and `Records.responseElements.instancesSet.items.groupSet.items.groupId` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.groupSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `groupSet_items_groupId` and `Records.responseElements.instancesSet.items.groupSet.items.groupId` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.groupSet.items.groupName`	`target.resource.attribute.labels[records_response_elements_instances_set_items_group_set_items_group_name]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.groupSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `groupSet_items_groupName` and `Records.responseElements.instancesSet.items.groupSet.items.groupName` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.groupSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `groupSet_items_groupName` and `Records.responseElements.instancesSet.items.groupSet.items.groupName` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.networkInterfaceSet.items.groupSet.items.groupId`	`target.resource.attribute.labels[records_response_elements_instances_set_items_network_interface_set_items_group_set_items_group_id]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items.groupSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_groupSet_items_groupId` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.groupSet.items.groupId` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items.groupSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_groupSet_items_groupId` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.groupSet.items.groupId` log field is mapped to the `about.resource.attribute.labels.value` UDM field.
`Records.responseElements.instancesSet.items.networkInterfaceSet.items.groupSet.items.groupName`	`target.resource.attribute.labels[records_response_elements_instances_set_items_network_interface_set_items_group_set_items_group_name]`	Iterate through log field `Records.responseElements.instancesSet.items`, then If the `index` value is equal to `0` then, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items.groupSet.items`, then the `target.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_groupSet_items_groupName` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.groupSet.items.groupName` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items`, then Iterate through log field `Records.responseElements.instancesSet.items.networkInterfaceSet.items.groupSet.items`, then the `about.resource.attribute.labels.key` UDM field is set to `networkInterfaceSet_items_groupSet_items_groupName` and `Records.responseElements.instancesSet.items.networkInterfaceSet.items.groupSet.items.groupName` log field is mapped to the `about.resource.attribute.labels.value` UDM field.

Field mapping reference: AWS CloudTrail - Dynamo

The following table lists the log fields for the Dynamo log type and their corresponding UDM fields.

Log field	UDM mapping	Logic
`Records.requestParameters.aggregateField`	`additional.fields[aggregate_field]`
`Records.requestParameters.allowForceDelete`	`target.resource.attribute.labels[req_allow_force_delete]`
`Records.requestParameters.applicationName`	`additional.fields[application_name]`
`Records.requestParameters.applyAction`	`target.resource.attribute.labels[req_apply_action]`
`Records.requestParameters.associationType`	`target.resource.attribute.labels[req_association_type]`
`Records.requestParameters.attributeDefinitions.attributeName`	`target.resource.attribute.labels[attributeDefinitions]`	Iterate through log field `Records.requestParameters.attributeDefinitions`, then the `target.resource.attribute.labels.key` UDM field is set to `req_attribute_definitions_attribute_name` and `Records.requestParameters.attributeDefinitions.attributeName` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.attributeDefinitions.attributeType`	`target.resource.attribute.labels[attributeDefinitions]`	Iterate through log field `Records.requestParameters.attributeDefinitions`, then the `target.resource.attribute.labels.key` UDM field is set to `req_attribute_definitions_attribute_type` and `Records.requestParameters.attributeDefinitions.attributeType` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.awsAccountId`	`target.resource.product_object_id`	`Records.requestParameters.awsAccountId` log field is mapped to the `target.resource.product_object_id` UDM field. If the `Records.requestParameters.awsAccountId` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and the `target.resource.resource_type` UDM field is set to `SERVICE_ACCOUNT`.
`Records.requestParameters.backupRetentionPeriod`	`target.resource.attribute.labels[res_backup_retention_period]`
`Records.requestParameters.billingMode`	`target.resource.attribute.labels[req_billing_mode]`
`Records.requestParameters.consistentRead`	`target.resource.attribute.labels[consistent_read]`
`Records.requestParameters.createResourceInput.pathPart`	`target.resource.attribute.labels[create_resource_input_path_part]`	If the `Records.responseElements.parentId` log field value is not empty then, the `target.resource.attribute.labels.key` UDM field is set to `create_resource_input_path_part` and `Records.responseElements.pathPart` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `create_resource_input_path_part` and `Records.requestParameters.createResourceInput.pathPart` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.pathPart`	`target.resource.attribute.labels[create_resource_input_path_part]`	If the `Records.responseElements.parentId` log field value is not empty then, the `target.resource.attribute.labels.key` UDM field is set to `create_resource_input_path_part` and `Records.responseElements.pathPart` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `create_resource_input_path_part` and `Records.requestParameters.createResourceInput.pathPart` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.createRestApiInput.disableExecuteApiEndpoint`	`security_result.detection_fields[disable_execute_api_endpoint]`
`Records.requestParameters.createRestApiInput.endpointConfiguration.ipv6`	`additional.fields[endpoint_configuration_ipv6]`
`Records.requestParameters.dBClusterIdentifier`	`target.resource.attribute.labels[db_cluster_identifier]`
`Records.requestParameters.dBClusterParameterGroupName`	`target.resource.attribute.labels[db_cluster_identifier_parameter_group_name]`
`Records.requestParameters.dBSubnetGroupName`	`target.resource.attribute.labels[db_subnet_group_name]`
`Records.requestParameters.deletionProtection`	`target.resource.attribute.labels[req_deletion_protection]`
`Records.requestParameters.deliveryStreamName`	`target.resource.name`	`Records.requestParameters.deliveryStreamName` log field is mapped to the `target.resource.name` UDM field. If the `Records.requestParameters.deliveryStreamName` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE`.
`Records.requestParameters.enableIAMDatabaseAuthentication`	`target.resource.attribute.labels[req_enable_iam_database_authentication]`
`Records.requestParameters.enforceConsumerDeletion`	`target.resource.attribute.labels[req_enforce_consumer_deletion]`
`Records.requestParameters.engine`	`target.resource.attribute.labels[req_engine]`
`Records.requestParameters.engineMode`	`target.resource.attribute.labels[req_engine_mode]`
`Records.requestParameters.engineVersion`	`target.resource.attribute.labels[req_engine_version]`
`Records.requestParameters.eventArns`	`target.resource.name`	Iterate through log field `Records.requestParameters.eventArns`, then If the `index` value is equal to `0` then, `Records.requestParameters.eventArns` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.eventArns` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.filter.eventArns`	`target.resource.name`	Iterate through log field `Records.requestParameters.filter.eventArns`, then If the `index` value is equal to `0` then, `Records.requestParameters.filter.eventArns` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.filter.eventArns` log field is mapped to the `target.resource_ancestors.name` UDM field and the `target.resource_ancestors.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.filter.eventStatusCodes`	`target.resource.attribute.labels[req_event_status_codes]`	Iterate through log field `Records.requestParameters.filter.eventStatusCodes`, then the `target.resource.attribute.labels.key` UDM field is set to `req_event_status_codes` and `Records.requestParameters.filter.eventStatusCodes` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.filter.eventTypeCategories`	`target.resource.attribute.labels[req_event_type_categories]`	Iterate through log field `Records.requestParameters.filter.eventTypeCategories`, then the `target.resource.attribute.labels.key` UDM field is set to `req_event_type_categories` and `Records.requestParameters.filter.eventTypeCategories` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.filter.startTimes.from`	`target.resource.attribute.labels[req_start_times_from]`	Iterate through log field `Records.requestParameters.filter.startTimes`, then the `target.resource.attribute.labels.key` UDM field is set to `req_start_times_from` and `Records.requestParameters.filter.startTimes.from` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.filter.endTimes.from`	`target.resource.attribute.labels`	Iterate through log field `Records.requestParameters.filter.endTimes`, then the `target.resource.attribute.labels.key` UDM field is set to `req_start_times_from` and `Records.requestParameters.filter.endTimes.from` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.filter.endTimes.to`	`target.resource.attribute.labels`	Iterate through log field `Records.requestParameters.filter.endTimes`, then the `target.resource.attribute.labels.key` UDM field is set to `req_start_times_to` and `Records.requestParameters.filter.endTimes.to` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.globalTableName`	`target.resource.name`	`Records.requestParameters.globalTableName` log field is mapped to the `target.resource.name` UDM field. If the `Records.requestParameters.tableName` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `TABLE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.items`	`target.resource.attribute.labels[req_items]`	Iterate through log field `Records.requestParameters.items`, then the `target.resource.attribute.labels.key` UDM field is set to `req_items` and `Records.requestParameters.items` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.key.id`	`target.resource.attribute.labels[req_key_id]`
`Records.requestParameters.key.LockID`	`target.resource.attribute.labels[req_key_lock_id]`
`Records.requestParameters.kmsKeyId`	`target.resource.attribute.labels[req_kms_key_id]`
`Records.requestParameters.limit`	`target.resource.attribute.labels[req_limit]`
`Records.requestParameters.locale`	`additional.fields[locale]`
`Records.requestParameters.masterUsername`	`target.resource.attribute.labels[req_master_user_name]`
`Records.requestParameters.masterUserPassword`	`target.resource.attribute.labels[req_master_user_password]`
`Records.requestParameters.MaxResults`	`target.resource.attribute.labels[req_max_results]`
`Records.requestParameters.nextToken`	`target.resource.attribute.labels[req_next_token]`
`Records.requestParameters.optInType`	`security_result.action`	If the `Records.requestParameters.optInType` log field value is equal to `immediate` then, the `security_result.action` UDM field is set to `ALLOW`. Else, if the `Records.requestParameters.optInType` log field value is equal to `undo-opt-in` then, the `security_result.action` UDM field is set to `BLOCK`.
`Records.requestParameters.parentId`	`principal.resource_ancestors.product_object_id`	If the `Records.responseElements.parentId` log field value is not empty then, `Records.responseElements.parentId` log field is mapped to the `principal.resource_ancestors.product_object_id` UDM field. Else, `Records.requestParameters.parentId` log field is mapped to the `principal.resource_ancestors.product_object_id` UDM field.
`Records.responseElements.parentId`	`principal.resource_ancestors.product_object_id`	If the `Records.responseElements.parentId` log field value is not empty then, `Records.responseElements.parentId` log field is mapped to the `principal.resource_ancestors.product_object_id` UDM field. Else, `Records.requestParameters.parentId` log field is mapped to the `principal.resource_ancestors.product_object_id` UDM field.
`Records.requestParameters.port`	`target.port`
`Records.requestParameters.preSignedUrl`	`target.resource.attribute.labels[req_pre_signed_url]`
`Records.requestParameters.projectionExpression`	`target.resource.attribute.labels[req_projection_expression]`
`Records.requestParameters.provisionedThroughput.readCapacityUnits`	`target.resource.attribute.labels[req_provisioned_throughput_read_capacity_units]`
`Records.requestParameters.provisionedThroughput.writeCapacityUnits`	`target.resource.attribute.labels[req_provisioned_throughput_write_capacity_units]`
`Records.requestParameters.resourceArn`	`target.resource.name`	`Records.requestParameters.resourceArn` log field is mapped to the `target.resource.name` UDM field. If the `Records.requestParameters.resourceArn` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.resourceArns`	`target.resource.name`	If the `Records.eventName` log field value is equal to `ListResources` then, Iterate through log field `Records.requestParameters.resourceArns`, then If the `index` value is equal to `0` then, `Records.requestParameters.resourceArns` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, `Records.requestParameters.resourceArns` log field is mapped to the `about.resource.name` UDM field and the `about.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `about.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.resourceId`	`target.resource.product_object_id`
`Records.requestParameters.resourceName`	`target.resource.name`	`Records.requestParameters.resourceName` log field is mapped to the `target.resource.name` UDM field. If the `Records.requestParameters.resourceName` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `DATABASE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.resourceOwner`	`target.resource.attribute.labels[req_resource_owner]`
`Records.requestParameters.resourceShareInvitationArn`	`target.resource.attribute.labels[req_resource_share_invitation_arn]`
`Records.requestParameters.resourceShareInvitationArns`	`target.resource.attribute.labels[req_resource_share_invitation_arns]`	Iterate through log field `Records.requestParameters.resourceShareInvitationArns`, then the `target.resource.attribute.labels.key` UDM field is set to `req_resource_share_invitation_arns` and `Records.requestParameters.resourceShareInvitationArns` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.resourceType`	`target.resource.attribute.labels[req_resource_type]`
`Records.requestParameters.sourceDBClusterSnapshotIdentifier`	`src.resource.name`	`Records.requestParameters.sourceDBClusterSnapshotIdentifier` log field is mapped to the `src.resource.name` UDM field. If the `Records.requestParameters.sourceDBClusterSnapshotIdentifier` log field value is not empty then, the `src.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and the `src.resource.resource_type` UDM field is set to `SNAPSHOT`.
`Records.requestParameters.sourceDBParameterGroupIdentifier`	`src.resource.name`	`Records.requestParameters.sourceDBParameterGroupIdentifier` log field is mapped to the `src.resource.name` UDM field. If the `Records.requestParameters.sourceDBClusterSnapshotIdentifier` log field value is not empty then, the `src.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and the `src.resource.resource_type` UDM field is set to `POLICY`.
`Records.requestParameters.sourceDBSnapshotIdentifier`	`src.resource.name`	`Records.requestParameters.sourceDBSnapshotIdentifier` log field is mapped to the `src.resource.name` UDM field. If the `Records.requestParameters.sourceDBSnapshotIdentifier` log field value is not empty then, the `src.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and the `src.resource.resource_type` UDM field is set to `SNAPSHOT`.
`Records.requestParameters.storageEncrypted`	`target.resource.attribute.labels[req_storage_encrypted]`
`Records.requestParameters.streamARN`	`target.resource.name`	If the `Records.requestParameters.streamARN` log field value is not empty then, `Records.requestParameters.streamARN` log field is mapped to the `target.resource.name` UDM field and the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.streamName`	`target.resource.name`	`Records.requestParameters.streamName` log field is mapped to the `target.resource.name` UDM field. If the `Records.requestParameters.streamName` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`. Else, the `target.resource.attribute.labels.key` UDM field is set to `stream_name` and `Records.requestParameters.streamName` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.tableName`	`target.resource.attribute.labels[tabel_name]`	If the `Records.eventname` log field value is equal to `CreateTable` then, the `target.resource.attribute.labels.key` UDM field is set to `tabel_name` and `Records.requestParameters.tableName` log field is mapped to the `target.resource.attribute.labels.value` UDM field. Else, if the `Records.eventname` log field value contain one of the following values `DeleteItem` `DescribeContinuousBackups` `DescribeTable` `DescribeTimeToLive` `GetItem` `ListContributorInsights` `ListTables` `PutItem` `Scan` then, `Records.requestParameters.tableName` log field is mapped to the `target.resource.name` UDM field. If the `Records.requestParameters.tableName` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `TABLE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.requestParameters.tags.key`	`target.resource.attribute.labels[tag]`	Iterate through log field `Records.requestParameters.tags`, then `Records.requestParameters.tags.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.tags.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.tags.value`	`target.resource.attribute.labels[tag]`	Iterate through log field `Records.requestParameters.tags`, then `Records.requestParameters.tags.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.requestParameters.tags.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.targetDBClusterSnapshotIdentifier`	`target.resource.attribute.labels[req_target_dbcluster_snapshot_identifier]`	`Records.requestParameters.targetDBClusterSnapshotIdentifier` log field is mapped to the `target.resource.name` UDM field. If the `Records.requestParameters.targetDBClusterSnapshotIdentifier` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and the `target.resource.resource_type` UDM field is set to `SNAPSHOT`. Else, the `target.resource.attribute.labels.key` UDM field is set to `req_target_dbcluster_snapshot_identifier` and `Records.requestParameters.targetDBClusterSnapshotIdentifier` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.requestParameters.targetDBParameterGroupDescription`	`target.resource.attribute.labels[req_target_db_parameter_group_description]`
`Records.requestParameters.targetDBParameterGroupIdentifier`	`target.resource.attribute.labels[req_target_db_parameter_group_identifier]`
`Records.requestParameters.targetDBSnapshotIdentifier`	`target.resource.attribute.labels[req_target_db_snapshot_identifier]`
`Records.requestParameters.template`	`additional.fields[res_template]`
`Records.requestParameters.vpcSecurityGroupIds`	`target.resource.attribute.labels[req_vpc_security_group_ids]`
`Records.responseElements.allocatedStorage`	`target.resource.attribute.labels[res_allocated_storage]`
`Records.responseElements.apiKeySource`	`target.resource.attribute.labels[api_key_source]`
`Records.responseElements.autoMinorVersionUpgrade`	`target.resource.attribute.labels[res_auto_minor_version_upgrade]`
`Records.responseElements.availabilityZone`	`target.resource.attribute.cloud.availability_zone`
`Records.responseElements.availabilityZones`	`target.resource.attribute.cloud.availability_zone`	Iterate through log field `Records.responseElements.availabilityZones`, then If the `index` value is equal to `0` then, `Records.responseElements.availabilityZones` log field is mapped to the `target.resource.attribute.cloud.availability_zone` UDM field. Else, the `target.resource.attribute.labels.key` UDM field is set to `availability_zones` and `Records.responseElements.availabilityZones` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.backupRetentionPeriod`	`target.resource.attribute.labels[res_backup_retention_period]`
`Records.responseElements.clusterCreateTime`	`target.resource.attribute.creation_time`
`Records.responseElements.copyTagsToSnapshot`	`target.resource.attribute.labels[res_copy_tags_to_snapshot]`
`Records.responseElements.createdDate`	`target.resource.attribute.creation_time`
`Records.responseElements.crossAccountClone`	`target.resource.attribute.labels[res_cross_account_clone]`
`Records.responseElements.dBClusterArn`	`target.resource.name`	`Records.responseElements.dBClusterArn` log field is mapped to the `target.resource.name` UDM field. If the `Records.responseElements.dBClusterArn` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and the `target.resource.resource_type` UDM field is set to `CLUSTER`.
`Records.responseElements.dBClusterIdentifier`	`target.resource.attribute.labels[res_db_cluster_identifier]`
`Records.responseElements.dBClusterParameterGroup`	`target.resource.attribute.labels[res_db_cluster_parameter_group]`
`Records.responseElements.dbClusterResourceId`	`target.resource.product_object_id`
`Records.responseElements.dBClusterSnapshotArn`	`target.resource.name`	`Records.responseElements.dBClusterSnapshotArn` log field is mapped to the `target.resource.name` UDM field. If the `Records.responseElements.dBClusterSnapshotArn` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and the `target.resource.resource_type` UDM field is set to `SNAPSHOT`.
`Records.responseElements.dBClusterSnapshotIdentifier`	`target.resource.product_object_id`
`Records.responseElements.dBInstanceIdentifier`	`target.resource.product_object_id`	If the `Records.eventName` log field value is equal to `CopyDBSnapshot` then, `Records.responseElements.dBInstanceIdentifier` log field is mapped to the `src.resource_ancestors.product_object_id` UDM field. If the `Records.responseElements.dBInstanceIdentifier` log field value is not empty then, the `src.resource_ancestors.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and the `src.resource_ancestors.resource_type` UDM field is set to `DATABASE`.
`Records.responseElements.dBParameterGroupArn`	`target.resource.name`	`Records.responseElements.dBParameterGroupArn` log field is mapped to the `target.resource.name` UDM field. If the `Records.responseElements.dBParameterGroupArn` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and the `target.resource.resource_type` UDM field is set to `POLICY`.
`Records.responseElements.dBParameterGroupFamily`	`target.resource.attribute.labels[res_db_parameter_group_family]`
`Records.responseElements.dBParameterGroupName`	`target.resource.attribute.labels[res_db_parameter_group_name]`
`Records.responseElements.dBSnapshotArn`	`target.resource.name`	If the `Records.eventName` log field value is equal to `CopyDBSnapshot` then, `Records.responseElements.dBSnapshotArn` log field is mapped to the `target.resource.name` UDM field. If the `Records.responseElements.dBSnapshotArn` log field value is not empty then, the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES` and the `target.resource.resource_type` UDM field is set to `SNAPSHOT`.
`Records.responseElements.dBSnapshotIdentifier`	`target.resource.product_object_id`
`Records.responseElements.dBSubnetGroup`	`target.resource.attribute.labels[res_db_subnet_group]`
`Records.responseElements.dedicatedLogVolume`	`target.resource.attribute.labels[res_dedicated_log_volume]`
`Records.responseElements.deletionProtection`	`target.resource.attribute.labels[res_deletion_protection]`
`Records.responseElements.encrypted`	`target.resource.attribute.labels[res_encrypted]`
`Records.responseElements.endpoint`	`target.url`
`Records.responseElements.endpointConfiguration.ipv6`	`additional.fields[re_endpoint_configuration_ipv6]`
`Records.responseElements.engine`	`target.resource.attribute.labels[res_engine]`
`Records.responseElements.engineMode`	`target.resource.attribute.labels[res_engine_mode]`
`Records.responseElements.engineVersion`	`target.resource.attribute.labels[res_engine_version]`
`Records.responseElements.hostedZoneId`	`target.resource.attribute.labels[res_hosted_zone_id]`
`Records.responseElements.httpEndpointEnabled`	`target.resource.attribute.labels[res_http_endpoint_enabled]`
`Records.responseElements.iAMDatabaseAuthenticationEnabled`	`target.resource.attribute.labels[res_iAMDatabaseAuthenticationEnabled]`
`Records.responseElements.id`	`target.resource.id`
`Records.responseElements.instanceCreateTime`	`src.resource_ancestors.attribute.creation_time`	If the `Records.eventName` log field value is equal to `CopyDBSnapshot` then, `Records.responseElements.instanceCreateTime` log field is mapped to the `src.resource_ancestors.attribute.creation_time` UDM field.
`Records.responseElements.kmsKeyId`	`target.resource.attribute.labels[res_kms_key_id]`
`Records.responseElements.licenseModel`	`target.resource.attribute.labels[res_license_model]`
`Records.responseElements.masterUsername`	`target.resource.attribute.labels[res_master_username]`
`Records.responseElements.multiAZ`	`target.resource.attribute.labels[res_multi_az]`
`Records.responseElements.networkType`	`target.resource.attribute.labels[res_network_type]`
`Records.responseElements.originalSnapshotCreateTime`	`target.resource.attribute.creation_time`
`Records.responseElements.path`	`target.resource.attribute.labels[response_elements_path]`
`Records.responseElements.pendingMaintenanceActionDetails.action`	`target.resource.attribute.labels[res_pending_maintenance_action_details_action]`
`Records.responseElements.pendingMaintenanceActionDetails.currentApplyDate`	`target.resource.attribute.last_update_time`
`Records.responseElements.pendingMaintenanceActionDetails.optInStatus`	`target.resource.attribute.labels[res_pending_maintenance_action_details_opt_in_status]`
`Records.responseElements.pendingModifiedValues.masterUserPassword`	`target.resource.attribute.labels[res_pending_modified_values_master_user_password]`
`Records.responseElements.pendingWindowInDays`	`target.resource.attribute.labels[res_pending_window_in_days]`
`Records.responseElements.percentProgress`	`target.resource.attribute.labels[res_percent_progress]`
`Records.responseElements.port`	`target.port`
`Records.responseElements.preferredBackupWindow`	`target.resource.attribute.labels[res_preferred_backup_window]`
`Records.responseElements.preferredMaintenanceWindow`	`target.resource.attribute.labels[res_preferred_maintenance_window]`
`Records.responseElements.readerEndpoint`	`target.resource.attribute.labels[res_reader_endpoint]`
`Records.responseElements.self.resourceId`	`target.resource.attribute.labels[self_resource_id]`
`Records.responseElements.self.restApiId`	`security_result.detection_fields[self_rest_api_id]`
`Records.responseElements.self.template`	`additional.fields[self_template]`
`Records.responseElements.snapshotCreateTime`	`target.resource.attribute.creation_time`	If the `Records.eventName` log field value is equal to `CopyDBClusterSnapshot` then, `Records.responseElements.originalSnapshotCreateTime` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, `Records.responseElements.snapshotCreateTime` log field is mapped to the `target.resource.attribute.creation_time` UDM field.
`Records.responseElements.originalSnapshotCreateTime`	`target.resource.attribute.creation_time`	If the `Records.eventName` log field value is equal to `CopyDBClusterSnapshot` then, `Records.responseElements.originalSnapshotCreateTime` log field is mapped to the `target.resource.attribute.creation_time` UDM field. Else, `Records.responseElements.snapshotCreateTime` log field is mapped to the `target.resource.attribute.creation_time` UDM field.
`Records.responseElements.snapshotTarget`	`target.resource.attribute.labels[res_snapshot_target]`
`Records.responseElements.snapshotType`	`target.resource.attribute.labels[res_snapshot_type]`
`Records.responseElements.sourceRegion`	`src.resource.attribute.cloud.availability_zone`
`Records.responseElements.status`	`target.resource.attribute.labels[res_status]`
`Records.responseElements.storageEncrypted`	`target.resource.attribute.labels[res_storage_encrypted]`
`Records.responseElements.storageType`	`target.resource.attribute.labels[res_storage_type]`
`Records.responseElements.tableDescription.attributeDefinitions.attributeName`	`target.resource.attribute.labels`	Iterate through log field `Records.responseElements.tableDescription.attributeDefinitions`, then the `target.resource.attribute.labels.key` UDM field is set to `table_description_attribute_definitions_attribute_name` and `Records.responseElements.tableDescription.attributeDefinitions.attributeName` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.tableDescription.attributeDefinitions.attributeType`	`target.resource.attribute.labels`	Iterate through log field `Records.responseElements.tableDescription.attributeDefinitions`, then the `target.resource.attribute.labels.key` UDM field is set to `table_description_attribute_definitions_attribute_type` and `Records.responseElements.tableDescription.attributeDefinitions.attributeType` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.tableDescription.creationDateTime`	`target.resource.attribute.creation_time`
`Records.responseElements.tableDescription.deletionProtectionEnabled`	`target.resource.attribute.labels[res_deletion_protection_enabled]`
`Records.responseElements.tableDescription.itemCount`	`target.resource.attribute.labels[res_item_count]`
`Records.responseElements.tableDescription.keySchema.attributeName`	`target.resource.attribute.labels`	Iterate through log field `Records.responseElements.tableDescription.keySchema`, then the `target.resource.attribute.labels.key` UDM field is set to `table_description_key_schema_attribute_name` and `Records.responseElements.tableDescription.keySchema.attributeName` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.tableDescription.keySchema.keyType`	`target.resource.attribute.labels`	Iterate through log field `Records.responseElements.tableDescription.keySchema`, then the `target.resource.attribute.labels.key` UDM field is set to `table_description_key_schema_key_type` and `Records.responseElements.tableDescription.keySchema.keyType` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.tableDescription.provisionedThroughput.numberOfDecreasesToday`	`target.resource.attribute.labels[res_provisioned_throughput_number_of_decreases_today]`
`Records.responseElements.tableDescription.provisionedThroughput.readCapacityUnits`	`target.resource.attribute.labels[res_item_count]`
`Records.responseElements.tableDescription.provisionedThroughput.writeCapacityUnits`	`target.resource.attribute.labels[res_item_count]`
`Records.responseElements.tableDescription.tableArn`	`target.resource.name`	`Records.responseElements.tableDescription.tableArn` log field is mapped to the `target.resource.name` UDM field. If the `Records.responseElements.tableDescription.tableArn` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `TABLE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.responseElements.tableDescription.tableId`	`target.resource.product_object_id`
`Records.responseElements.tableDescription.tableName`	`target.resource.attribute.labels[tabel_name]`
`Records.responseElements.tableDescription.tableSizeBytes`	`target.resource.attribute.labels[res_table_size_bytes]`
`Records.responseElements.tableDescription.tableStatus`	`target.resource.attribute.labels[res_tabel_status]`
`Records.responseElements.tagList.key`	`target.resource.attribute.labels`	Iterate through log field `Records.requestParameters.tagList`, then `Records.responseElements.tagList.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.tagList.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.tagList.value`	`target.resource.attribute.labels`	Iterate through log field `Records.requestParameters.tagList`, then `Records.responseElements.tagList.key` log field is mapped to the `target.resource.attribute.labels.key` UDM field and `Records.responseElements.tagList.value` log field is mapped to the `target.resource.attribute.labels.value` UDM field.
`Records.responseElements.vpcId`	`target.resource.attribute.labels[res_vpc_id]`
`Records.serviceEventDetails.eventRequestDetails.analysisId`	`target.resource.name`	`Records.serviceEventDetails.eventRequestDetails.analysisId` log field is mapped to the `target.resource.name` UDM field. If the `Records.serviceEventDetails.eventRequestDetails.analysisId` log field value is not empty then, the `target.resource.resource_type` UDM field is set to `BACKEND_SERVICE` and the `target.resource.attribute.cloud.environment` UDM field is set to `AMAZON_WEB_SERVICES`.
`Records.serviceEventDetails.eventResponseDetails.analysisDetails.analysisId`	`target.resource.attribute.labels[service_event_details_event_response_details_analysis_details_analysis_id]`
`Records.serviceEventDetails.eventResponseDetails.analysisDetails.analysisName`	`target.resource.attribute.labels[service_event_details_event_response_details_analysis_details_analysis_name]`
`Records.serviceEventDetails.eventResponseDetails.analysisDetails.dataSetIdList`	`target.resource.attribute.labels[service_event_details_event_response_details_analysis_details_data_set_id_list]`	Iterate through log field `Records.serviceEventDetails.eventResponseDetails.analysisDetails.dataSetIdList`, then the `target.resource.attribute.labels.key` UDM field is set to `service_event_details_event_response_details_analysis_details_data_set_id_list` and `Records.serviceEventDetails.eventResponseDetails.analysisDetails.dataSetIdList` log field is mapped to the `target.resource.attribute.labels.value` UDM field.

UDM mapping delta

UDM mapping delta reference: AWS_CloudTrail - Common Schema Field Mapping

The following table lists Common Schema Field Mapping delta between Default parser of AWS_CloudTrail and premium version of AWS_CloudTrail.

Default UDM mapping	Log field	Premium Mapping Delta
`principal.location.name, target.location.name`	`Records.awsRegion`	`target.location.name`
`security_result.rule_id`	`Records.errorCode`	`security_result.summary`
`target.application, metadata.ingestion_labels.key`	`Records.eventSource, Records.insightDetails.eventSource`	`target.application`
`target.resource.attribute.labels[Request ID]`	`Records.requestID`	`additional.fields[request_id]`
`target.resource.product_object_id`	`Records.resources.accountId`	`about.resource.product_object_id`
`target.resource.name`	`Records.resources.ARN`	`about.resource.name`
`target.resource.type`	`Records.resources.type`	`about.resource.resource_subtype`
`security_result.detection_fields[clientProvidedHostHeader]`	`Records.tlsDetails.clientProvidedHostHeader`	`network.tls.client.server_name`
`principal.user.attribute.labels[UseraccountId_label], principal.user.group_identifiers`	`Records.userIdentity.accountId`	`principal.resource.product_object_id`
`security_result.detection_fields[InvokedBy]`	`Records.userIdentity.invokedBy`	`principal.user.attribute.labels[invoked_by]`
`additional.fields[sessionIssuerArn]`	`Records.userIdentity.sessionContext.sessionIssuer.arn`	`principal.user.attribute.labels[session_issuer_arn]`
`target.user.userid, additional.fields[sessionIssuerPrincipalId]`	`Records.userIdentity.sessionContext.sessionIssuer.principalId`	`principal.user.attribute.labels[session_issuer_principal_id]`
`target.user.attribute.labels[Type]`	`Records.userIdentity.sessionContext.sessionIssuer.type`	`principal.user.attribute.labels[session_issuer_type]`
`target.user.user_display_name`	`Records.userIdentity.sessionContext.sessionIssuer.userName`	`principal.user.attribute.labels[session_issuer_user_name]`
`principal.resource.type, principal.resource.resource_subtype`	`Records.userIdentity.type`	`principal.user.attribute.roles.name`
`additional_fields[insightType]`	`Records.insightDetails.insightType`	`security_result.rule_type`
`additional.fields[baseline_value]`	`Records.insightDetails.insightContext.attributions.baseline.vlaue`	`security_result.detection_fields[insight_context_attributions_baseline_value]`
`additional.fields[baseline_average]`	`Records.insightDetails.insightContext.attributions.baseline.average`	`security_result.detection_fields[insight_context_attributions_baseline_average]`
`additional_fields[attribute]`	`Records.insightDetails.insightContext.attributions.attribute`	`security_result.detection_fields[insight_context_attribution]`
`principal.user.userid`	`Records.additionalEventData.UserName`	`additional.fields[additional_event_data_username]`
`additional.fields[AuthenticationMethod]`	`Records.additionalEventData.AuthenticationMethod`	`target.resource.attribute.labels[req_authentication_method]`
`network.tls.cipher`	`Records.additionalEventData.CipherSuite`	`target.resource.attribute.labels[req_cipher_suite]`
`additional.fields[SignatureVersion]`	`Records.additionalEventData.SignatureVersion`	`target.resource.attribute.labels[req_signature_version]`
`additional.fields[SSEApplied]`	`Records.additionalEventData.SSEApplied`	`target.resource.attribute.labels[req_sse_applied]`
`additional.fields[x-amz-id-2]`	`Records.additionalEventData.x-amz-id-2`	`target.resource.attribute.labels[req_x-amz-id-2]`

UDM Mapping Delta reference: AWS_CloudTrail - S3

The following table lists delta between Default parser of AWS_CloudTrail and premium version of AWS_CloudTrail for S3 service.

Default UDM mapping	Log field	Premium Mapping Delta
`additional.fields[requestParameters.bucketPolicy.Statement.%{index}.Resource]`	`Records.requestParameters.bucketPolicy.Statement.Resource`	`target.resource.attribute.labels[resource]`
`additional.fields[requestParameters.bucketPolicy.Statement.%{index}.Action]`	`Records.requestParameters.bucketPolicy.Statement.Action`	`target.resource.attribute.labels[action]`

UDM Mapping Delta reference: AWS_CloudTrail - EC2

The following table lists delta between Default parser of AWS_CloudTrail and premium version of AWS_CloudTrail for EC2 service.

Default UDM mapping	Log field	Premium Mapping Delta
`target.resource.attribute.labels[RequestID]`	`Records.responseElements.requestId`	`additional.fields[request_id]`
`target.resource.name,target.resource.product_object_id`	`Records.responseElements.AssociateIamInstanceProfileResponse.iamInstanceProfileAssociation.instanceId`	`target.resource.product_object_id`
`target.resource.attribute.labels`	`Records.requestParameters.subnetId`	`target.resource.product_object_id`
`target.resource.product_object_id`	`Records.requestParameters.networkInterfaceId`	`target.resource_ancestors.product_object_id`
`target.resource.product_object_id`	`Records.requestParameters.instanceId`	`target.resource_ancestors.product_object_id`
`principal.port`	`Records.requestParameters.ipPermissions.items.fromPort`	`target.resource.attribute.labels[records_request_parameters_ip_permissions_items_from_port]`
`target.resource.product_object_id`	`Records.responseElements.networkInterface.groupSet.items.groupId`	`security_result.rule_id`
`target.port`	`Records.requestParameters.ipPermissions.items.toPort`	`target.resource.attribute.labels[records_request_parameters_ip_permissions_items_to_port]`

UDM Mapping Delta reference: AWS_CloudTrail - Security Identity Compliance

The following table lists delta between Default parser of AWS_CloudTrail and premium version of AWS_CloudTrail for Security Identity Compliance group.

Default UDM mapping	Log field	Premium Mapping Delta
`target.resource.attribute.labels[Policy ARN %{index}]`	`Records.requestParameters.policyArns.arn, Records.responseElements.instanceProfile.arn`	`target.resource_ancestors.name`
`target.resource.product_object_id`	`Records.requestParameters.name`	`target.resource.attribute.labels[req_name]`
`target.resource.name`	`Records.requestParameters.roleSessionName`	`target.resource.attribute.labels[req_role_session_name]`
`security_result.detection_fields[encryptionAlgorithm]`	`Records.responseElements.keyMetadata.encryptionAlgorithms`	`target.resource.attribute.labels[res_key_metadata_encryption_algorithms]`
`target.resource.resource_subtype`	`Records.requestParameters.resourceType`	`target.resource.resource_type`