All events
// Operations

Cloud Api Call

DescribeSecurityGroups by arn:aws:iam::4419:user/ekowalski succeeded

EVT-1ED8CFInfo

Same principal

Other activity for ekowalski around this time

TimeEventSeverityHost
2026-09-03 05:17:44ZAuthentication FailureLowWS-FIN-002

Same source address

Other activity from 10.4.12.29

TimeEventUserCountry
2026-09-03 06:07:21ZNetwork Allow
2026-09-03 06:10:07ZNetwork Allow
2026-09-03 06:32:47ZNetwork Allow

Record

Source
AWS CloudTrailCloud
Event type
CLOUD_API_CALL
Action
DescribeSecurityGroups
Status
success
Observed

Pivot

Every identifier on this record, as a one-click hunt.