Difference between revisions of "Template:Data lake example query"
Jump to navigation
Jump to search
(Created page with " select userIdentity.arn as user, element_at(requestParameters, 'bucketName') as bucket, element_at(requestParameters, 'key') as key, count(*) as attempts fro...") |
|||
| Line 5: | Line 5: | ||
from xxxxx-yyyyy-xxxxx-zzzz-xxxxx | from xxxxx-yyyyy-xxxxx-zzzz-xxxxx | ||
where eventSource = '[[s3.amazonaws.com]]' | where eventSource = '[[s3.amazonaws.com]]' | ||
| − | and eventName = 'GetObject' | + | and [[eventName]] = '[[GetObject]]' |
and userIdentity.arn = '[[arn:aws:sts]]::0987654321:[[assumed-role/]]your-role/[email protected]' | and userIdentity.arn = '[[arn:aws:sts]]::0987654321:[[assumed-role/]]your-role/[email protected]' | ||
group by 1, | group by 1, | ||
Latest revision as of 06:27, 11 July 2024
select userIdentity.arn as user, element_at(requestParameters, 'bucketName') as bucket, element_at(requestParameters, 'key') as key, count(*) as attempts from xxxxx-yyyyy-xxxxx-zzzz-xxxxx where eventSource = 's3.amazonaws.com' and eventName = 'GetObject' and userIdentity.arn = 'arn:aws:sts::0987654321:assumed-role/your-role/[email protected]' group by 1, 2, 3 order by attempts desc
Advertising:
