"userIdentity.type":Root (-eventType:AwsServiceEvent)