以下是我在CloudTrail生成的S3日志中收到的事件:
{
"eventVersion": "1.05",
"userIdentity": {
"type": "IAMUser",
"principalId": "AID...HVRL",
"arn": "arn:aws:iam::233333337:user/Administrator",
"accountId": "233333337",
"accessKeyId": "abcd",
"userName": "Administrator"
},
"eventTime": "2019-06-26T21:49:54Z",
"eventSource": "acm.amazonaws.com",
"eventName": "GetCertificate",
"awsRegion": "us-east-2",
"sourceIPAddress": "64.xx.xx.224",
"userAgent": "aws-sdk-go/1.20.3 (go1.12.6; darwin; amd64)",
"requestParameters": {
"certificateArn": "arn:aws:acm:us-east-2:233333337:certificate/23fffff-1fff4-bfff-6fffff"
},
"responseElements": {
"certificateChain": "-----BEGIN CERTIFICATE-----nMIID2zCCA...ZYIQu003du003dn-----END CERTIFICATE-----n-----BEGIN CERTIFICATE-----nMIIDrzC......Nh7d1A6k8u003dn-----END CERTIFICATE-----n",
"certificate": "-----BEGIN CERTIFICATE-----nMIIDpTC......8ilqQHRR80CEgu003du003dn-----END CERTIFICATE-----n"
},
"requestID": "55600533-985c-11e9-8a21-a3d9a1ca5215",
"eventID": "a50a8e95-972a-44aa-9c74-ddf59b12ccc8",
"eventType": "AwsApiCall",
"recipientAccountId": "285774445527"
}
从我的Mac笔记本电脑向AWS Cert Manager提交AWS SDK请求后,
但是,
我的Mac笔记本电脑上的ifconfig
show 64.xx.xx.224
但是事件日志
"sourceIPAddress"
as "64.xx.xx.224"
sourceIPAddress
在此事件中指示什么?
IP地址是请求起源的一个。
可以看到。网络上的计算机通常具有本地IP地址(192.x或10.x(。当请求退出互联网时,它们将"看起来"来自与路由器网关关联的IP地址。因此,公司内的所有流量通常都来自相同的IP地址。即使是家庭网络上的流量也将在一个公共IP地址上出现。
UserAgent
确实表明您在Mac上使用了GO SDK,因此可能是您的请求。因此,请相信您的请求确实来自该IP地址。